cbcvebase.

Microsoft Sql Server 2019 vulnerabilities

224 known vulnerabilities affecting microsoft/microsoft_sql_server_2019.

Total CVEs
224
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL6HIGH186MEDIUM32

Vulnerabilities

Page 2 of 12
CVE-2026-67378P2CRITICALCVSS 9.0≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67378 [CRITICAL] CWE-822 CVE-2026-67378: Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-59499P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4455.2≥ 15.0.0, < 15.0.2155.22025-11-11
CVE-2025-59499 [HIGH] CWE-89 CVE-2025-59499: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-77481P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-77481 [HIGH] CWE-122 CVE-2026-77481: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67380P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67380 [HIGH] CWE-122 CVE-2026-67380: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-68786P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68786 [HIGH] CWE-122 CVE-2026-68786: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-68775P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-68775 [HIGH] CWE-122 CVE-2026-68775: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67639P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67639 [HIGH] CWE-122 CVE-2026-67639: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67385P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67385 [HIGH] CWE-416 CVE-2026-67385: Use after free in SQL Server allows an authorized attacker to execute code over a network. Use after free in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67388P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67388 [HIGH] CWE-122 CVE-2026-67388: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-55002P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4480.2≥ 15.0.0, < 15.0.2180.22026-07-14
CVE-2026-55002 [HIGH] CWE-73 CVE-2026-55002: External control of file name or path in SQL Server allows an authorized attacker to elevate privile External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-66818P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-66818 [HIGH] CWE-269 CVE-2026-66818: Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-94512P2HIGHCVSS 8.8≥ 15.0.0, < 15.0.2200.22026-10-13
CVE-2026-94512 [HIGH] CWE-122 CVE-2026-94512: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-40370P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4470.1≥ 15.0.0, < 15.0.2170.12026-05-12
CVE-2026-40370 [HIGH] CWE-73 CVE-2026-40370: External control of file name or path in SQL Server allows an authorized attacker to execute code ov External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2025-49759P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4440.1≥ 15.0.0, < 15.0.2140.12025-08-12
CVE-2025-49759 [HIGH] CWE-89 CVE-2025-49759: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2025-53727P2HIGHCVSS 8.8≥ 15.0.0.0, < 15.0.4440.1≥ 15.0.0, < 15.0.2140.12025-08-12
CVE-2025-53727 [HIGH] CWE-89 CVE-2025-53727: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-67379P2HIGHCVSS 8.5≥ 15.0.0.0, < 15.0.4490.9≥ 15.0.0, < 15.0.2190.72026-09-08
CVE-2026-67379 [HIGH] CWE-121 CVE-2026-67379: Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a netwo Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-68883P2HIGHCVSS 8.5≥ 15.0.0, < 15.0.2200.22026-10-13
CVE-2026-68883 [HIGH] CWE-122 CVE-2026-68883: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26191P3HIGHCVSS 8.8≥ 15.0.0, < 15.0.4390.2≥ 15.0.0, < 15.0.2120.12024-09-10
CVE-2024-26191 [HIGH] CWE-122 CVE-2024-26191: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
nvd
CVE-2024-37335P2HIGHCVSS 8.8≥ 15.0.0, < 15.0.4390.2≥ 15.0.0, < 15.0.2120.12024-09-10
CVE-2024-37335 [HIGH] CWE-122 CVE-2024-37335: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
nvd
CVE-2024-37339P2HIGHCVSS 8.8≥ 15.0.0, < 15.0.4390.2≥ 15.0.0, < 15.0.2120.12024-09-10
CVE-2024-37339 [HIGH] CWE-822 CVE-2024-37339: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
nvd
← Previous2 / 12Next →
Microsoft Sql Server 2019 vulnerabilities | cvebase