cbcvebase.

Microsoft Sql Server 2017 vulnerabilities

152 known vulnerabilities affecting microsoft/microsoft_sql_server_2017.

Total CVEs
152
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL4HIGH125MEDIUM23

Vulnerabilities

Page 7 of 8
CVE-2023-23384P3HIGHCVSS 7.3≥ 14.0.0, < 14.0.2047.8≥ 14.0.0, < 14.0.3460.92023-04-11
CVE-2023-23384 [HIGH] CWE-122 CVE-2023-23384: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-67390P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67390 [MEDIUM] CWE-126 CVE-2026-67390: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67386P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67386 [MEDIUM] CWE-908 CVE-2026-67386: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68776P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68776 [MEDIUM] CWE-908 CVE-2026-68776: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67648P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67648 [MEDIUM] CWE-908 CVE-2026-67648: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67393P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67393 [MEDIUM] CWE-126 CVE-2026-67393: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49021P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49021 [HIGH] CWE-416 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-43474P3HIGHCVSS 7.5≥ 14.0.0, < 14.0.3475.1≥ 14.0.0, < 14.0.2060.12024-09-10
CVE-2024-43474 [HIGH] CWE-170 CVE-2024-43474: Microsoft SQL Server Information Disclosure Vulnerability Microsoft SQL Server Information Disclosure Vulnerability
nvd
CVE-2023-21528P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.3460.9≥ 14.0.0, < 14.0.2047.82023-02-14
CVE-2023-21528 [HIGH] CWE-122 CVE-2023-21528: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-68779P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68779 [MEDIUM] CWE-125 CVE-2026-68779: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68777P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67629P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68784P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68778P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68781P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68780P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-68780 [MEDIUM] CWE-125 CVE-2026-68780: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67630P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67630 [MEDIUM] CWE-125 CVE-2026-67630: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67645P3MEDIUMCVSS 6.5≥ 14.0.0, < 14.0.3550.4≥ 14.0.0, < 14.0.2130.42026-09-08
CVE-2026-67645 [MEDIUM] CWE-125 CVE-2026-67645: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.2070.1≥ 14.0.0, < 14.0.3485.12024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2023-21704P3HIGHCVSS 7.8≥ 14.0.0, < 14.0.3460.9≥ 14.0.0, < 14.0.2047.82023-02-14
CVE-2023-21704 [HIGH] CWE-190 CVE-2023-21704: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
← Previous7 / 8Next →
Microsoft Sql Server 2017 vulnerabilities | cvebase