Veille CVE

Recherche « Microsoft sql server management studio »

2 CVE

  1. CVE-2026-103572 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-65669 9.6 Critique

    Microsoft SQL Server Management Studio 22 · Microsoft sql server management studio

    Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.