Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

207 records

Vendor: Microsoft Component: Sql Server 2019 Clear all filters
TI-2026-73495 CVE-2026-68883 · GHSA-pj26-v6gh-94p3

Heap overflow in Microsoft SQL Server allows privilege escalation

Priority MEDIUM 40

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00557 Published 2026-10-13 Fixed in 14.0.2140.2, 14.0.3560.2 +6 CWE-122
TI-2026-73494 CVE-2026-67625 · GHSA-v4wv-hx9g-mj5x

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 40

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00557 Published 2026-10-13 Fixed in 14.0.2140.2, 14.0.3560.2 +6 CWE-122
TI-2026-54016 CVE-2026-77481 · GHSA-x655-787w-f787

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47788 CVE-2026-67645 · GHSA-g97c-mh47-f65v

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-47777 CVE-2026-67624 · GHSA-rfjq-fp98-3gw6

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-125
TI-2026-47453 CVE-2026-66819 · GHSA-9c22-76g9-f83j

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
TI-2026-54540 CVE-2026-78441 · GHSA-jvcr-r2w7-m2qx

Windows OLE DB Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +2 CWE-125
TI-2026-54541 CVE-2026-78442 · GHSA-gvh2-qc62-c423

Windows OLE DB Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +2 CWE-122
TI-2026-48872 CVE-2026-69562 · GHSA-4wq6-733f-h82j

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +2 CWE-125
TI-2026-54023 CVE-2026-77488 · GHSA-2p2q-6jp7-fc7g

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 25

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00404 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-191
TI-2026-54021 CVE-2026-77486 · GHSA-p7q9-j6xv-6q58

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +2 CWE-122
TI-2026-54020 CVE-2026-77485 · GHSA-969q-58jf-4f5x

SQL Server Elevation of Privilege Vulnerability

Priority LOW 32

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-416
TI-2026-54022 CVE-2026-77487 · GHSA-ch5f-9v66-h8x4

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-284
TI-2026-54019 CVE-2026-77484 · GHSA-9c53-qmh3-jjjf

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 43

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01694 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-502
Load more