Microsoft Sql Server 2025 vulnerabilities
71 known vulnerabilities affecting microsoft/sql_server_2025.
Total CVEs
71
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL6HIGH39MEDIUM26
Vulnerabilities
Page 2 of 4
CVE-2026-67378P2CRITICALCVSS 9.0fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67378 [CRITICAL] CWE-822 CVE-2026-67378: Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a n
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-67373P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67373 [HIGH] CWE-122 CVE-2026-67373: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67638P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67638 [HIGH] CWE-122 CVE-2026-67638: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67642P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67642 [HIGH] CWE-122 CVE-2026-67642: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-77481P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-77481 [HIGH] CWE-122 CVE-2026-77481: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67380P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67380 [HIGH] CWE-122 CVE-2026-67380: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-68786P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-68786 [HIGH] CWE-122 CVE-2026-68786: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-68775P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-68775 [HIGH] CWE-122 CVE-2026-68775: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67639P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67639 [HIGH] CWE-122 CVE-2026-67639: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67385P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67385 [HIGH] CWE-416 CVE-2026-67385: Use after free in SQL Server allows an authorized attacker to execute code over a network.
Use after free in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67388P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67388 [HIGH] CWE-122 CVE-2026-67388: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-55002P2HIGHCVSS 8.8≥ 17.0.1000.7, < 17.0.1125.2≥ 17.0.4006.2, < 17.0.4060.22026-07-14
CVE-2026-55002 [HIGH] CWE-73 CVE-2026-55002: External control of file name or path in SQL Server allows an authorized attacker to elevate privile
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-66818P2HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-66818 [HIGH] CWE-269 CVE-2026-66818: Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-40370P2HIGHCVSS 8.8≥ 17.0.1000.7, < 17.0.1115.1≥ 17.0.4006.2, < 17.0.4040.12026-05-12
CVE-2026-40370 [HIGH] CWE-73 CVE-2026-40370: External control of file name or path in SQL Server allows an authorized attacker to execute code ov
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67379P2HIGHCVSS 8.5fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67379 [HIGH] CWE-121 CVE-2026-67379: Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a netwo
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67384P3HIGHCVSS 8.8fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67384 [HIGH] CWE-122 CVE-2026-67384: Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a ne
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-67636P3CRITICALCVSS 9.0fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-67636 [CRITICAL] CWE-125 CVE-2026-67636: Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-47297P3HIGHCVSS 8.1fixed in 17.0.1135.8≥ 17.0.4006.2, < 17.0.4085.52026-09-08
CVE-2026-47297 [HIGH] CWE-502 CVE-2026-47297: Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-47296P3HIGHCVSS 7.5≥ 17.0.1000.7, < 17.0.1125.2≥ 17.0.4006.2, < 17.0.4060.22026-07-14
CVE-2026-47296 [HIGH] CWE-89 CVE-2026-47296: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-20803P3HIGHCVSS 7.2v17.0.1000.72026-01-13
CVE-2026-20803 [HIGH] CWE-306 CVE-2026-20803: Missing authentication for critical function in SQL Server allows an authorized attacker to elevate
Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd