Microsoft Sql Server 2019 vulnerabilities
224 known vulnerabilities affecting microsoft/microsoft_sql_server_2019.
Total CVEs
224
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL6HIGH186MEDIUM32
Vulnerabilities
Page 10 of 12
CVE-2026-67648P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67648 [MEDIUM] CWE-908 CVE-2026-67648: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67393P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67393 [MEDIUM] CWE-126 CVE-2026-67393: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49021P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2130.3≥ 15.0.0, < 15.0.4410.12024-11-12
CVE-2024-49021 [HIGH] CWE-416 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-43474P3HIGHCVSS 7.5≥ 15.0.0, < 15.0.2120.12024-09-10
CVE-2024-43474 [HIGH] CWE-170 CVE-2024-43474: Microsoft SQL Server Information Disclosure Vulnerability
Microsoft SQL Server Information Disclosure Vulnerability
nvd
CVE-2023-21528P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.4280.7≥ 15.0.0, < 15.0.2101.72023-02-14
CVE-2023-21528 [HIGH] CWE-122 CVE-2023-21528: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-85919P3HIGHCVSS 7.0≥ 15.0.0, < 15.0.2200.22026-10-13
CVE-2026-85919 [HIGH] CWE-122 CVE-2026-85919: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88082P3HIGHCVSS 7.0≥ 15.0.0, < 15.0.2200.22026-10-13
CVE-2026-88082 [HIGH] CWE-122 CVE-2026-88082: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-67624P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67624 [MEDIUM] CWE-125 CVE-2026-67624: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68779P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68779 [MEDIUM] CWE-125 CVE-2026-68779: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68777P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67629P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68784P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68778P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68781P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68780P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68780 [MEDIUM] CWE-125 CVE-2026-68780: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67630P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67630 [MEDIUM] CWE-125 CVE-2026-67630: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67645P3MEDIUMCVSS 6.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67645 [MEDIUM] CWE-125 CVE-2026-67645: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-36417P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2104.1≥ 15.0.0, < 15.0.4326.12023-10-10
CVE-2023-36417 [HIGH] CWE-122 CVE-2023-36417: Microsoft SQL OLE DB Remote Code Execution Vulnerability
Microsoft SQL OLE DB Remote Code Execution Vulnerability
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2130.3≥ 15.0.0, < 15.0.4410.12024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2023-21704P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.4280.7≥ 15.0.0, < 15.0.2101.72023-02-14
CVE-2023-21704 [HIGH] CWE-190 CVE-2023-21704: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd