Microsoft Sql Server 2019 vulnerabilities
140 known vulnerabilities affecting microsoft/sql_server_2019.
Total CVEs
140
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH135MEDIUM3
Vulnerabilities
Page 2 of 7
CVE-2024-37338P2HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2120.1≥ 15.0.4003.23, < 15.0.4390.22024-09-10
CVE-2024-37338 [HIGH] CWE-125 CVE-2024-37338: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
nvd
CVE-2024-26186P2HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2120.1≥ 15.0.4003.23, < 15.0.4390.22024-09-10
CVE-2024-26186 [HIGH] CWE-416 CVE-2024-26186: Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
nvd
CVE-2025-49719P3HIGHCVSS 7.5≥ 15.0.2000.5, < 15.0.2135.5≥ 15.0.4003.23, < 15.0.4435.72025-07-08
CVE-2025-49719 [HIGH] CWE-20 CVE-2025-49719: Improper input validation in SQL Server allows an unauthorized attacker to disclose information over
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-49717P3HIGHCVSS 8.5≥ 15.0.2000.5, < 15.0.2135.5≥ 15.0.4003.23, < 15.0.4435.72025-07-08
CVE-2025-49717 [HIGH] CWE-122 CVE-2025-49717: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2024-37332P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-37332 [HIGH] CWE-122 CVE-2024-37332: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21414P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21414 [HIGH] CWE-122 CVE-2024-21414: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37318P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-37318 [HIGH] CWE-122 CVE-2024-37318: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-35272P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-35272 [HIGH] CWE-122 CVE-2024-35272: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21398P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21398 [HIGH] CWE-122 CVE-2024-21398: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37331P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-37331 [HIGH] CWE-122 CVE-2024-37331: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-35271P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-35271 [HIGH] CWE-122 CVE-2024-35271: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21333P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21333 [HIGH] CWE-122 CVE-2024-21333: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21415P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21415 [HIGH] CWE-122 CVE-2024-21415: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21428P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21428 [HIGH] CWE-190 CVE-2024-21428: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21373P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21373 [HIGH] CWE-122 CVE-2024-21373: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21332P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21332 [HIGH] CWE-416 CVE-2024-21332: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21335P3HIGHCVSS 8.8≥ 15.0.2000.5, < 15.0.2116.2≥ 15.0.4003.23, < 15.0.4382.12024-07-09
CVE-2024-21335 [HIGH] CWE-122 CVE-2024-21335: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-38087P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-38087 [HIGH] CWE-415 CVE-2024-38087: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-38088P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-38088 [HIGH] CWE-122 CVE-2024-38088: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37336P3HIGHCVSS 8.8fixed in 15.0.2116.2≥ 15.0.4375.4, < 15.0.4382.12024-07-09
CVE-2024-37336 [HIGH] CWE-190 CVE-2024-37336: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd