cbcvebase.

Microsoft Sql Server 2022 vulnerabilities

166 known vulnerabilities affecting microsoft/sql_server_2022.

Total CVEs
166
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL8HIGH133MEDIUM25

Vulnerabilities

Page 9 of 9
CVE-2026-67633P3MEDIUMCVSS 6.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-67633 [MEDIUM] CWE-125 CVE-2026-67633: Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-68785P3MEDIUMCVSS 4.9fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-68785 [MEDIUM] CWE-122 CVE-2026-68785: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-77488P4MEDIUMCVSS 5.5fixed in 16.0.1200.5≥ 16.0.4003.1, < 16.0.4275.22026-09-08
CVE-2026-77488 [MEDIUM] CWE-191 CVE-2026-77488: Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose infor Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
nvd
CVE-2025-47997P4MEDIUMCVSS 5.3≥ 16.0.1000.6, < 16.0.1150.1≥ 16.0.4003.1, < 16.0.4212.12025-09-09
CVE-2025-47997 [MEDIUM] CWE-200 CVE-2025-47997: Concurrent execution using shared resource with improper synchronization ('race condition') in SQL S Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-37337P4MEDIUMCVSS 4.3≥ 16.0.1000.6, < 16.0.1125.1≥ 16.0.4003.1, < 16.0.4140.32024-09-10
CVE-2024-37337 [MEDIUM] CWE-197 CVE-2024-37337: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
CVE-2024-37342P4MEDIUMCVSS 4.3≥ 16.0.1000.6, < 16.0.1125.1≥ 16.0.4003.1, < 16.0.4140.32024-09-10
CVE-2024-37342 [MEDIUM] CWE-125 CVE-2024-37342: Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
nvd
← Previous9 / 9
Microsoft Sql Server 2022 vulnerabilities | cvebase