Microsoft Sql Server 2022 vulnerabilities
166 known vulnerabilities affecting microsoft/sql_server_2022.
Total CVEs
166
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL8HIGH133MEDIUM25
Vulnerabilities
Page 8 of 9
CVE-2026-73029P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-73029 [MEDIUM] CWE-126 CVE-2026-73029: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67648P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67648 [MEDIUM] CWE-908 CVE-2026-67648: Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-66816P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-66816 [MEDIUM] CWE-778 CVE-2026-66816: Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2026-67393P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67393 [MEDIUM] CWE-126 CVE-2026-67393: Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49021P3HIGHCVSS 7.8≥ 16.0.1000.6, < 16.0.1135.2≥ 16.0.4003.1, < 16.0.4155.42024-11-12
CVE-2024-49021 [HIGH] CWE-416 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
nvd
CVE-2026-67641P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67641 [MEDIUM] CWE-190 CVE-2026-67641: Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a ne
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-67624P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67624 [MEDIUM] CWE-125 CVE-2026-67624: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68779P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68779 [MEDIUM] CWE-125 CVE-2026-68779: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68777P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67389P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67389 [MEDIUM] CWE-125 CVE-2026-67389: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67629P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68784P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68778P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68781P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-68780P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68780 [MEDIUM] CWE-125 CVE-2026-68780: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67630P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67630 [MEDIUM] CWE-125 CVE-2026-67630: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-67645P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67645 [MEDIUM] CWE-125 CVE-2026-67645: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-49043P3HIGHCVSS 7.8≥ 16.0.1000.6, < 16.0.1135.2≥ 16.0.4003.1, < 16.0.4155.42024-11-12
CVE-2024-49043 [HIGH] CWE-426 CVE-2024-49043: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
nvd
CVE-2026-77485P3HIGHCVSS 7.0fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-77485 [HIGH] CWE-416 CVE-2026-77485: Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-37966P3HIGHCVSS 7.1≥ 16.0.1000.6, < 16.0.1125.1≥ 16.0.4003.1, < 16.0.4140.32024-09-10
CVE-2024-37966 [HIGH] CWE-125 CVE-2024-37966: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd