Veille CVE

Recherche « Microsoft sql server 2022 »

84 CVE

Critique 7 Élevée 47 Moyenne 30 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft sql server 2022 » ✕
  1. CVE-2026-96956 8.0 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. CVE-2026-94520 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

  3. CVE-2026-94512 8.8 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  4. CVE-2026-88089 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  5. CVE-2026-88088 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-88086 5.3 Moyenne

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

  7. CVE-2026-88085 6.4 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-88083 7.5 Élevée

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 (CU8)

    Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-88082 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-88081 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  11. CVE-2026-85919 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-85888 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  13. CVE-2026-85886 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  14. CVE-2026-85876 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-83945 6.6 Moyenne

    Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (CU9)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  16. CVE-2026-70189 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  17. CVE-2026-68883 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  18. CVE-2026-67628 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  19. CVE-2026-67626 6.5 Moyenne

    Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 for x64-based Systems (CU9) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

  20. CVE-2026-67625 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  21. CVE-2026-65674 8.8 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  22. CVE-2026-69867 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

  23. CVE-2026-103572 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

  24. CVE-2026-78456 8.8 Élevée

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft sql server 2022

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  25. CVE-2026-77488 5.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

  26. CVE-2026-77487 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  27. CVE-2026-77485 7.0 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  28. CVE-2026-77484 8.8 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  29. CVE-2026-77483 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

  30. CVE-2026-77481 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  31. CVE-2026-77480 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  32. CVE-2026-73029 6.5 Moyenne

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  33. CVE-2026-73028 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  34. CVE-2026-72933 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  35. CVE-2026-68787 7.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  36. CVE-2026-68786 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  37. CVE-2026-68785 4.9 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  38. CVE-2026-68784 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  39. CVE-2026-68781 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  40. CVE-2026-68780 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  41. CVE-2026-68779 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  42. CVE-2026-68778 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  43. CVE-2026-68777 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  44. CVE-2026-68776 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  45. CVE-2026-68775 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  46. CVE-2026-67648 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  47. CVE-2026-67645 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  48. CVE-2026-67643 9.8 Critique

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  49. CVE-2026-67641 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

  50. CVE-2026-67639 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  51. CVE-2026-67636 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

  52. CVE-2026-67633 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

  53. CVE-2026-67631 9.8 Critique

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  54. CVE-2026-67630 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  55. CVE-2026-67629 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  56. CVE-2026-67624 6.5 Moyenne

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  57. CVE-2026-67393 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  58. CVE-2026-67390 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  59. CVE-2026-67389 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  60. CVE-2026-67388 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  61. CVE-2026-67386 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  62. CVE-2026-67385 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use after free in SQL Server allows an authorized attacker to execute code over a network.

  63. CVE-2026-67384 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

  64. CVE-2026-67381 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  65. CVE-2026-67380 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  66. CVE-2026-67379 8.5 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  67. CVE-2026-67378 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

  68. CVE-2026-67376 7.5 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

  69. CVE-2026-67370 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  70. CVE-2026-67368 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

  71. CVE-2026-66820 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  72. CVE-2026-66819 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  73. CVE-2026-66818 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

  74. CVE-2026-66816 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

  75. CVE-2026-66814 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  76. CVE-2026-47297 8.1 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  77. CVE-2022-50997 7.5 Élevée

    Weaver Network Co., Ltd. E-cology 9.0 · Weaver Network Co., Ltd. E-cology 8.0

    Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET request with UNION-based injection payloads through the unsanitized id parameter to retrieve arbitrary data from the Microsoft SQL Server backend. This vulnerability is potentially remediated in software version 10.53 or 10.54. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18 (UTC).

  78. CVE-2026-47295 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  79. CVE-2026-55002 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

  80. CVE-2026-54118 9.8 Critique

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  81. CVE-2026-54117 9.8 Critique

    Microsoft SQL Server 2025 (CU 6) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2016 · Microsoft sql server 2017

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  82. CVE-2026-47296 7.5 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  83. CVE-2026-42990 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

  84. CVE-2026-40370 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.