Microsoft SQL Server vulnerabilities

108 known vulnerabilities affecting microsoft/sql_server.

Total CVEs
108
CISA KEV
2
actively exploited
Public exploits
22
Exploited in wild
2
Severity breakdown
CRITICAL18HIGH57MEDIUM30LOW3

Vulnerabilities

Page 1 of 6
CVE-2024-0056HIGHCVSS 8.7v20222024-01-09
CVE-2024-0056 [HIGH] CWE-319 CVE-2024-0056: Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnera Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
nvd
CVE-2023-36730HIGHCVSS 7.8v2019v20222023-10-10
CVE-2023-36730 [HIGH] CWE-122 CVE-2023-36730: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36420HIGHCVSS 7.8v2019v20222023-10-10
CVE-2023-36420 [HIGH] CWE-415 CVE-2023-36420: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36417HIGHCVSS 7.8v2019v20222023-10-10
CVE-2023-36417 [HIGH] CWE-122 CVE-2023-36417: Microsoft SQL OLE DB Remote Code Execution Vulnerability Microsoft SQL OLE DB Remote Code Execution Vulnerability
nvd
CVE-2023-36785HIGHCVSS 7.8v2019v20222023-10-10
CVE-2023-36785 [HIGH] CWE-191 CVE-2023-36785: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-36728MEDIUMCVSS 5.5v2014v2016+3 more2023-10-10
CVE-2023-36728 [MEDIUM] CWE-125 CVE-2023-36728: Microsoft SQL Server Denial of Service Vulnerability Microsoft SQL Server Denial of Service Vulnerability
nvd
CVE-2023-38169HIGHCVSS 8.8v2019v20222023-08-08
CVE-2023-38169 [HIGH] CWE-416 CVE-2023-38169: Microsoft SQL OLE DB Remote Code Execution Vulnerability Microsoft SQL OLE DB Remote Code Execution Vulnerability
nvd
CVE-2023-29356HIGHCVSS 7.8v2019v20222023-06-16
CVE-2023-29356 [HIGH] CWE-416 CVE-2023-29356: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32025HIGHCVSS 7.8v2019v20222023-06-16
CVE-2023-32025 [HIGH] CWE-122 CVE-2023-32025: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32027HIGHCVSS 7.8v2019v20222023-06-16
CVE-2023-32027 [HIGH] CWE-122 CVE-2023-32027: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32026HIGHCVSS 7.8v2019v20222023-06-16
CVE-2023-32026 [HIGH] CWE-122 CVE-2023-32026: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-32028HIGHCVSS 7.8v2019v20222023-06-16
CVE-2023-32028 [HIGH] CWE-122 CVE-2023-32028: Microsoft SQL OLE DB Remote Code Execution Vulnerability Microsoft SQL OLE DB Remote Code Execution Vulnerability
nvd
CVE-2023-29349HIGHCVSS 7.8v2019v20222023-06-16
CVE-2023-29349 [HIGH] CWE-191 CVE-2023-29349: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
nvd
CVE-2023-23384HIGHCVSS 7.3v2008v2012+5 more2023-04-11
CVE-2023-23384 [HIGH] CWE-122 CVE-2023-23384: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21705HIGHCVSS 8.8v2012v2014+4 more2023-02-14
CVE-2023-21705 [HIGH] CWE-321 CVE-2023-21705: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21704HIGHCVSS 7.8v2014v2016+3 more2023-02-14
CVE-2023-21704 [HIGH] CWE-190 CVE-2023-21704: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21718HIGHCVSS 7.8v2008v2008_r2+6 more2023-02-14
CVE-2023-21718 [HIGH] CWE-191 CVE-2023-21718: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21528HIGHCVSS 7.8v2008v2012+5 more2023-02-14
CVE-2023-21528 [HIGH] CWE-122 CVE-2023-21528: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-21713HIGHCVSS 8.8v2012v2014+4 more2023-02-14
CVE-2023-21713 [HIGH] CWE-502 CVE-2023-21713: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-29143HIGHCVSS 7.5v2014v2016+2 more2022-06-15
CVE-2022-29143 [HIGH] CVE-2022-29143: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
1 / 6Next →