Microsoft Sql Server 2017 vulnerabilities
152 known vulnerabilities affecting microsoft/microsoft_sql_server_2017.
Total CVEs
152
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL4HIGH125MEDIUM23
Vulnerabilities
Page 6 of 8
CVE-2024-49015P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49015 [HIGH] CWE-122 CVE-2024-49015: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49007P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49007 [HIGH] CWE-122 CVE-2024-49007: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49008P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49008 [HIGH] CWE-122 CVE-2024-49008: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48998P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48998 [HIGH] CWE-122 CVE-2024-48998: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49011P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49011 [HIGH] CWE-122 CVE-2024-49011: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49016P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49016 [HIGH] CWE-416 CVE-2024-49016: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49012P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49012 [HIGH] CWE-122 CVE-2024-49012: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49010P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49010 [HIGH] CWE-122 CVE-2024-49010: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49013P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49013 [HIGH] CWE-122 CVE-2024-49013: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48999P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48999 [HIGH] CWE-122 CVE-2024-48999: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49014P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49014 [HIGH] CWE-415 CVE-2024-49014: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48997P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-48997 [HIGH] CWE-122 CVE-2024-48997: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49017P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49017 [HIGH] CWE-122 CVE-2024-49017: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49006P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49006 [HIGH] CWE-122 CVE-2024-49006: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49009P3HIGHCVSS 8.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49009 [HIGH] CWE-122 CVE-2024-49009: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2022-29143P3HIGHCVSS 7.5≥ 14.0.0, < 14.0.2042.3≥ 14.0.0.0, < 14.0.3445.22022-06-15
CVE-2022-29143 [HIGH] CVE-2022-29143: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-67376P3HIGHCVSS 7.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67376 [HIGH] CWE-190 CVE-2026-67376: Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-68787P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68787 [HIGH] CWE-122 CVE-2026-68787: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
nvd
CVE-2026-32176P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.3525.1≥ 14.0.0, < 14.0.2105.12026-04-14
CVE-2026-32176 [HIGH] CWE-89 CVE-2026-32176: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32167P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.3525.1≥ 14.0.0, < 14.0.2105.12026-04-14
CVE-2026-32167 [HIGH] CWE-89 CVE-2026-32167: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd