cbcvebase.

Microsoft Sql Server 2017 vulnerabilities

147 known vulnerabilities affecting microsoft/sql_server_2017.

Total CVEs
147
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
2
Severity breakdown
CRITICAL5HIGH120MEDIUM22

Vulnerabilities

Page 7 of 8
CVE-2026-67390P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67390 [MEDIUM] CWE-126 CVE-2026-67390: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67386P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67386 [MEDIUM] CWE-908 CVE-2026-67386: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68776P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68776 [MEDIUM] CWE-908 CVE-2026-68776: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67648P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67648 [MEDIUM] CWE-908 CVE-2026-67648: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67393P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67393 [MEDIUM] CWE-126 CVE-2026-67393: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49021P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49021 [HIGH] CWE-416 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-43474P3HIGHCVSS 7.5≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.12024-09-10
CVE-2024-43474 [HIGH] CWE-170 CVE-2024-43474: Microsoft SQL Server Information Disclosure Vulnerability Microsoft SQL Server Information Disclosure Vulnerability
nvd
CVE-2026-68779P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68779 [MEDIUM] CWE-125 CVE-2026-68779: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68777P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67629P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68784P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68778P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68781P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68780P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-68780 [MEDIUM] CWE-125 CVE-2026-68780: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67630P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67630 [MEDIUM] CWE-125 CVE-2026-67630: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67645P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67645 [MEDIUM] CWE-125 CVE-2026-67645: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 14.0.1000.169, < 14.0.2070.1≥ 14.0.3006.16, < 14.0.3485.12024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2026-77485P3HIGHCVSS 7.0fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-77485 [HIGH] CWE-416 CVE-2026-77485: Use after free in SQL Server allows an authorized attacker to elevate privileges locally. Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-37966P3HIGHCVSS 7.1≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.12024-09-10
CVE-2024-37966 [HIGH] CWE-125 CVE-2024-37966: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2026-67633P3MEDIUMCVSS 6.5fixed in 14.0.2130.4≥ 14.0.3006.16, < 14.0.3550.42026-09-08
CVE-2026-67633 [MEDIUM] CWE-125 CVE-2026-67633: Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
nvd
← Previous7 / 8Next →