Microsoft Sql Server 2022 vulnerabilities
197 known vulnerabilities affecting microsoft/microsoft_sql_server_2022.
Total CVEs
197
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH156MEDIUM34
Vulnerabilities
Page 9 of 10
CVE-2026-88082P3HIGHCVSS 7.0≥ 16.0.0, < 16.0.1210.32026-10-13
CVE-2026-88082 [HIGH] CWE-122 CVE-2026-88082: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-67624P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-67624 [MEDIUM] CWE-125 CVE-2026-67624: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68779P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-68779 [MEDIUM] CWE-125 CVE-2026-68779: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68777P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67389P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-67389 [MEDIUM] CWE-125 CVE-2026-67389: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67629P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68784P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68778P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68781P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68780P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-68780 [MEDIUM] CWE-125 CVE-2026-68780: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67630P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-67630 [MEDIUM] CWE-125 CVE-2026-67630: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67645P3MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-67645 [MEDIUM] CWE-125 CVE-2026-67645: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67626P3MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.1210.32026-10-13
CVE-2026-67626 [MEDIUM] CWE-400 CVE-2026-67626: Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
nvd
CVE-2023-36417P3HIGHCVSS 7.8≥ 16.0.0, < 16.0.1105.1≥ 15.0.0, < 16.0.4080.12023-10-10
CVE-2023-36417 [HIGH] CWE-122 CVE-2023-36417: Microsoft SQL OLE DB Remote Code Execution Vulnerability
Microsoft SQL OLE DB Remote Code Execution Vulnerability
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 16.0.0, < 16.0.1135.22024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2023-21704P3HIGHCVSS 7.8≥ 16.0.0, < 16.0.1050.52023-02-14
CVE-2023-21704 [HIGH] CWE-190 CVE-2023-21704: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-77485P3HIGHCVSS 7.0≥ 16.0.0.0, < 16.0.4275.2≥ 16.0.0, < 16.0.1200.52026-09-08
CVE-2026-77485 [HIGH] CWE-416 CVE-2026-77485: Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36785P3HIGHCVSS 7.8≥ 16.0.0, < 16.0.1105.1≥ 15.0.0, < 16.0.4080.12023-10-10
CVE-2023-36785 [HIGH] CWE-191 CVE-2023-36785: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36730P3HIGHCVSS 7.8≥ 16.0.0, < 16.0.1105.1≥ 15.0.0, < 16.0.4080.12023-10-10
CVE-2023-36730 [HIGH] CWE-122 CVE-2023-36730: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36420P3HIGHCVSS 7.8≥ 16.0.0, < 16.0.1105.1≥ 15.0.0, < 16.0.4080.12023-10-10
CVE-2023-36420 [HIGH] CWE-415 CVE-2023-36420: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd