Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

8 records in Sql Server Management Studio · all components

TI-2018-06197 CVE-2018-8533 · GHSA-r6vp-xpx4-xx8q

XML external entity injection in Microsoft SQL Server Management Studio 17.9

MEDIUM 45

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Informati…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.23373 Published 2018-10-10 No fix listed CWE-611

TI-2018-06196 CVE-2018-8532 · GHSA-x45m-w2h7-rx2r

XML external entity injection in Microsoft SQL Server Management Studio 17.9

MEDIUM 45

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Informati…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.23373 Published 2018-10-10 No fix listed CWE-611

TI-2018-06192 CVE-2018-8527 · GHSA-gmwc-6m29-5hv6

XML external entity injection in Microsoft SQL Server Management Studio 17.9

MEDIUM 45

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an external entity, aka "SQL Server Management Studio Informatio…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.23373 Published 2018-10-10 No fix listed CWE-611

TI-2026-46814 CVE-2026-65669 · GHSA-mqmp-r7vg-2hph

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 44

Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00863 Published 2026-09-08 Fixed in 22.8.2 CWE-74

TI-2019-01088 CVE-2019-1376 · GHSA-624c-cxwr-xj6q

Improper handling of exceptional conditions in Microsoft SQL Server Management Studio

LOW 37

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05381 Published 2019-10-10 No fix listed CWE-755

TI-2019-01027 CVE-2019-1313 · GHSA-4qf7-6rxr-hq63

Improper handling of exceptional conditions in Microsoft SQL Server Management Studio

LOW 37

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05311 Published 2019-10-10 No fix listed CWE-755

TI-2025-21211 CVE-2025-29803 · GHSA-mxmx-4cj8-4596

Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

LOW 35

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00767 Published 2025-04-12 Fixed in 20.2.37.0, 16.0.35907.0 +1 CWE-427

TI-2020-01414 CVE-2020-1455 · GHSA-6pcm-x8v9-rgxq

Microsoft SQL Server Management Studio Denial of Service Vulnerability

LOW 27

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01228 Published 2020-08-17 Fixed in publication

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1