cbcvebase.

Microsoft Sql Server 2019 vulnerabilities

194 known vulnerabilities affecting microsoft/sql_server_2019.

Total CVEs
194
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH163MEDIUM24

Vulnerabilities

Page 9 of 10
CVE-2026-67376P3HIGHCVSS 7.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67376 [HIGH] CWE-190 CVE-2026-67376: Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-68787P3HIGHCVSS 7.8fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68787 [HIGH] CWE-122 CVE-2026-68787: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
nvd
CVE-2026-32167P3HIGHCVSS 7.8≥ 15.0.2000.5, < 15.0.2165.1≥ 15.0.4003.23, < 15.0.4465.12026-04-14
CVE-2026-32167 [HIGH] CWE-89 CVE-2026-32167: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32176P3HIGHCVSS 7.8≥ 15.0.2000.5, < 15.0.2165.1≥ 15.0.4003.23, < 15.0.4465.12026-04-14
CVE-2026-32176 [HIGH] CWE-89 CVE-2026-32176: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-29045P3HIGHCVSS 7.5≥ 15.0.2000.5, < 15.0.2110.4≥ 15.0.4003.23, < 15.0.4360.22024-04-09
CVE-2024-29045 [HIGH] CWE-121 CVE-2024-29045: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-67390P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67390 [MEDIUM] CWE-126 CVE-2026-67390: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67386P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67386 [MEDIUM] CWE-908 CVE-2026-67386: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68776P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68776 [MEDIUM] CWE-908 CVE-2026-68776: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-73029P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-73029 [MEDIUM] CWE-126 CVE-2026-73029: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67648P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67648 [MEDIUM] CWE-908 CVE-2026-67648: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67393P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67393 [MEDIUM] CWE-126 CVE-2026-67393: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49021P3HIGHCVSS 7.8≥ 15.0.2000.5, < 15.0.2130.3≥ 15.0.4003.23, < 15.0.4410.12024-11-12
CVE-2024-49021 [HIGH] CWE-416 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-43474P3HIGHCVSS 7.5≥ 15.0.2000.5, < 15.0.2120.12024-09-10
CVE-2024-43474 [HIGH] CWE-170 CVE-2024-43474: Microsoft SQL Server Information Disclosure Vulnerability Microsoft SQL Server Information Disclosure Vulnerability
nvd
CVE-2026-67624P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67624 [MEDIUM] CWE-125 CVE-2026-67624: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68779P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68779 [MEDIUM] CWE-125 CVE-2026-68779: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68777P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67629P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68784P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68778P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68781P3MEDIUMCVSS 6.5fixed in 15.0.2190.7≥ 15.0.4003.23, < 15.0.4490.92026-09-08
CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
← Previous9 / 10Next →
Microsoft Sql Server 2019 vulnerabilities | cvebase