Veille CVE

Recherche « Microsoft sql server 2016 »

10 CVE

Critique 3 Élevée 7 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft sql server 2016 » ✕
  1. CVE-2026-69867 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-72933 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-47295 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  4. CVE-2026-55002 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

  5. CVE-2026-54118 9.8 Critique

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-54117 9.8 Critique

    Microsoft SQL Server 2025 (CU 6) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2016 · Microsoft sql server 2017

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-47296 7.5 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  8. CVE-2026-42990 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-40370 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

  10. CVE-2019-1068 8.8 Élevée Exploitée

    Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) · Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.