Microsoft Sql Server 2019 vulnerabilities
153 known vulnerabilities affecting microsoft/microsoft_sql_server_2019.
Total CVEs
153
CISA KEV
0
Public exploits
0
Exploited in wild
2
Severity breakdown
CRITICAL2HIGH147MEDIUM4
Vulnerabilities
Page 8 of 8
CVE-2023-21528P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2101.7≥ 15.0.0, < 15.0.4280.72023-02-14
CVE-2023-21528 [HIGH] CWE-122 CVE-2023-21528: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36417P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2104.1≥ 15.0.0, < 15.0.4326.12023-10-10
CVE-2023-36417 [HIGH] CWE-122 CVE-2023-36417: Microsoft SQL OLE DB Remote Code Execution Vulnerability
Microsoft SQL OLE DB Remote Code Execution Vulnerability
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2130.3≥ 15.0.0, < 15.0.4410.12024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2023-21704P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2101.7≥ 15.0.0, < 15.0.4280.72023-02-14
CVE-2023-21704 [HIGH] CWE-190 CVE-2023-21704: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36785P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2104.1≥ 15.0.0, < 15.0.4326.12023-10-10
CVE-2023-36785 [HIGH] CWE-191 CVE-2023-36785: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36730P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2104.1≥ 15.0.0, < 15.0.4326.12023-10-10
CVE-2023-36730 [HIGH] CWE-122 CVE-2023-36730: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36420P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2104.1≥ 15.0.0, < 15.0.4326.12023-10-10
CVE-2023-36420 [HIGH] CWE-415 CVE-2023-36420: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-37966P3HIGHCVSS 7.1≥ 15.0.0, < 15.0.2120.1≥ 15.0.0, < 15.0.4390.22024-09-10
CVE-2024-37966 [HIGH] CWE-125 CVE-2024-37966: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2023-21718P3HIGHCVSS 7.8≥ 15.0.0, < 15.0.2101.7≥ 15.0.0, < 15.0.4280.72023-02-14
CVE-2023-21718 [HIGH] CWE-191 CVE-2023-21718: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-47997P4MEDIUMCVSS 5.3≥ 15.0.0.0, < 15.0.4445.1≥ 15.0.0, < 15.0.2145.12025-09-09
CVE-2025-47997 [MEDIUM] CWE-200 CVE-2025-47997: Concurrent execution using shared resource with improper synchronization ('race condition') in SQL S
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-37337P4MEDIUMCVSS 4.3≥ 15.0.0, < 15.0.2120.1≥ 15.0.0, < 15.0.4390.22024-09-10
CVE-2024-37337 [MEDIUM] CWE-197 CVE-2024-37337: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2024-37342P4MEDIUMCVSS 4.3≥ 15.0.0, < 15.0.4390.2≥ 15.0.0, < 15.0.2120.12024-09-10
CVE-2024-37342 [MEDIUM] CWE-125 CVE-2024-37342: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2023-36728P4MEDIUMCVSS 5.5≥ 15.0.0, < 15.0.4326.1≥ 15.0.0, < 15.0.2104.12023-10-10
CVE-2023-36728 [MEDIUM] CWE-125 CVE-2023-36728: Microsoft SQL Server Denial of Service Vulnerability
Microsoft SQL Server Denial of Service Vulnerability
nvd
← Previous8 / 8