Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

86 records in Sql Server 2025 · all components

TI-2026-39042 CVE-2026-54118 · GHSA-c2qv-v7mm-7vwh

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 46

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-502
TI-2026-39041 CVE-2026-54117 · GHSA-hx3c-jrf3-3m7r

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 46

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2026-07-14 Fixed in 17.0.4060.2, 17.0.1125.2 CWE-502
TI-2026-47787 CVE-2026-67643 · GHSA-r6qg-cj8h-f89v

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 45

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 +2 CWE-122
TI-2026-47780 CVE-2026-67631 · GHSA-9wr9-7c42-p6f9

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 45

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-54019 CVE-2026-77484 · GHSA-9c53-qmh3-jjjf

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 43

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01694 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-502
TI-2026-21109 CVE-2026-26115 · GHSA-xjf9-64j8-5qjg

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 43

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0125 Published 2026-03-10 Fixed in 13.0.6480.4, 13.0.7075.5 +8 CWE-1287
TI-2026-17169 CVE-2026-21262 · GHSA-wmrr-4347-6m3q

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 43

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01661 Published 2026-03-10 Fixed in 13.0.6480.4, 13.0.7075.5 +8 CWE-284
TI-2026-54016 CVE-2026-77481 · GHSA-x655-787w-f787

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-48364 CVE-2026-68786 · GHSA-cp2c-9r38-r3hx

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-48354 CVE-2026-68775 · GHSA-pqhh-6372-c5r4

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47786 CVE-2026-67642 · GHSA-3x5q-47j3-8fw5

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 17.0.4085.5, 17.0.1135.8 CWE-122
TI-2026-47784 CVE-2026-67639 · GHSA-8jxv-x8fp-rxf8

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47783 CVE-2026-67638 · GHSA-ghg4-3wxm-cgjx

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 17.0.4085.5, 17.0.1135.8 CWE-122
TI-2026-47782 CVE-2026-67636 · GHSA-9r6v-wqq6-8v3r

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-125
TI-2026-47677 CVE-2026-67388 · GHSA-9v73-pr97-vpq7

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47675 CVE-2026-67385 · GHSA-p7jh-8q9g-vggh

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-416
TI-2026-47674 CVE-2026-67384 · GHSA-6m72-p3fw-wjjv

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47672 CVE-2026-67381 · GHSA-p386-p34m-xfc6

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47671 CVE-2026-67380 · GHSA-82pw-m47h-m5xj

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47669 CVE-2026-67378 · GHSA-4259-xrjq-w65p

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-822
TI-2026-47667 CVE-2026-67373 · GHSA-hw7m-97vj-v7g7

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 17.0.4085.5, 17.0.1135.8 CWE-122
TI-2026-47666 CVE-2026-67370 · GHSA-9q7c-j2j7-x447

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
TI-2026-47664 CVE-2026-67368 · GHSA-fm4w-j23h-7p7j

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01024 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-59
TI-2026-47454 CVE-2026-66820 · GHSA-wccj-w6f2-7r8j

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
Load more
Open these records in search →