Microsoft Sql Server 2017 vulnerabilities
152 known vulnerabilities affecting microsoft/microsoft_sql_server_2017.
Total CVEs
152
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL4HIGH125MEDIUM23
Vulnerabilities
Page 3 of 8
CVE-2024-37965P2HIGHCVSS 8.8≥ 14.0.0, < 14.0.3475.1≥ 14.0.0, < 14.0.2060.12024-09-10
CVE-2024-37965 [HIGH] CWE-20 CVE-2024-37965: Microsoft SQL Server Elevation of Privilege Vulnerability
Microsoft SQL Server Elevation of Privilege Vulnerability
nvd
CVE-2024-37980P3CRITICALCVSS 9.8≥ 14.0.0, < 14.0.3475.1≥ 14.0.0, < 14.0.2060.12024-09-10
CVE-2024-37980 [CRITICAL] CWE-269 CVE-2024-37980: Microsoft SQL Server Elevation of Privilege Vulnerability
Microsoft SQL Server Elevation of Privilege Vulnerability
nvd
CVE-2023-21713P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.3460.9≥ 14.0.0, < 14.0.2047.82023-02-14
CVE-2023-21713 [HIGH] CWE-502 CVE-2023-21713: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-78442P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-78442 [HIGH] CWE-122 CVE-2026-78442: Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77482P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-77482 [HIGH] CWE-122 CVE-2026-77482: Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a netw
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-49719P3HIGHCVSS 7.5≥ 14.0.0, < 14.0.3495.9≥ 14.0.0, < 14.0.2075.82025-07-08
CVE-2025-49719 [HIGH] CWE-20 CVE-2025-49719: Improper input validation in SQL Server allows an unauthorized attacker to disclose information over
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-77486P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-77486 [HIGH] CWE-122 CVE-2026-77486: Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-37332P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2056.2≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-37332 [HIGH] CWE-122 CVE-2024-37332: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21414P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2056.2≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-21414 [HIGH] CWE-122 CVE-2024-21414: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37318P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2056.2≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-37318 [HIGH] CWE-122 CVE-2024-37318: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-35272P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-35272 [HIGH] CWE-122 CVE-2024-35272: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21398P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2056.2≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-21398 [HIGH] CWE-122 CVE-2024-21398: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37331P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2056.2≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-37331 [HIGH] CWE-122 CVE-2024-37331: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-35271P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2056.2≥ 14.0.0, < 14.0.3471.22024-07-09
CVE-2024-35271 [HIGH] CWE-122 CVE-2024-35271: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-48995P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48995 [HIGH] CWE-122 CVE-2024-48995: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-38255P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-38255 [HIGH] CWE-122 CVE-2024-38255: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48996P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48996 [HIGH] CWE-122 CVE-2024-48996: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48994P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48994 [HIGH] CWE-122 CVE-2024-48994: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-43459P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-43459 [HIGH] CWE-416 CVE-2024-43459: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48993P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48993 [HIGH] CWE-122 CVE-2024-48993: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd