Microsoft Sql Server 2017 vulnerabilities
99 known vulnerabilities affecting microsoft/sql_server_2017.
Total CVEs
99
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH94MEDIUM3
Vulnerabilities
Page 5 of 5
CVE-2024-49012P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49012 [HIGH] CWE-122 CVE-2024-49012: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49010P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49010 [HIGH] CWE-122 CVE-2024-49010: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49013P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49013 [HIGH] CWE-122 CVE-2024-49013: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48999P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-48999 [HIGH] CWE-122 CVE-2024-48999: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49014P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49014 [HIGH] CWE-415 CVE-2024-49014: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-48997P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-48997 [HIGH] CWE-122 CVE-2024-48997: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49017P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49017 [HIGH] CWE-122 CVE-2024-49017: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49006P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49006 [HIGH] CWE-122 CVE-2024-49006: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2024-49009P3HIGHCVSS 8.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49009 [HIGH] CWE-122 CVE-2024-49009: SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
nvd
CVE-2026-32167P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2105.1≥ 14.0.3006.16, < 14.0.3525.12026-04-14
CVE-2026-32167 [HIGH] CWE-89 CVE-2026-32167: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32176P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2105.1≥ 14.0.3006.16, < 14.0.3525.12026-04-14
CVE-2026-32176 [HIGH] CWE-89 CVE-2026-32176: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-47296P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2120.1≥ 14.0.3006.16, < 14.0.3540.12026-07-14
CVE-2026-47296 [HIGH] CWE-89 CVE-2026-47296: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49021P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49021 [HIGH] CWE-416 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-43474P3HIGHCVSS 7.5≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.12024-09-10
CVE-2024-43474 [HIGH] CWE-170 CVE-2024-43474: Microsoft SQL Server Information Disclosure Vulnerability
Microsoft SQL Server Information Disclosure Vulnerability
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2024-37966P3HIGHCVSS 7.1≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.12024-09-10
CVE-2024-37966 [HIGH] CWE-125 CVE-2024-37966: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2025-47997P4MEDIUMCVSS 5.3≥ 14.0.1000.169, < 14.0.2085.1≥ 14.0.3006.16, < 14.0.3505.12025-09-09
CVE-2025-47997 [MEDIUM] CWE-200 CVE-2025-47997: Concurrent execution using shared resource with improper synchronization ('race condition') in SQL S
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-37337P4MEDIUMCVSS 4.3≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.12024-09-10
CVE-2024-37337 [MEDIUM] CWE-197 CVE-2024-37337: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2024-37342P4MEDIUMCVSS 4.3≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.12024-09-10
CVE-2024-37342 [MEDIUM] CWE-125 CVE-2024-37342: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
← Previous5 / 5