Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

181 records

Priority LOW 35

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00487 Published 2026-10-13 Fixed in 16.0.1210.3, 16.0.4305.5 +2 CWE-121
Priority MEDIUM 40

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00557 Published 2026-10-13 Fixed in 14.0.2140.2, 14.0.3560.2 +6 CWE-122
Priority MEDIUM 40

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00557 Published 2026-10-13 Fixed in 14.0.2140.2, 14.0.3560.2 +6 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-125
Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 CWE-122
Priority LOW 25

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00404 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-191
Priority LOW 32

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-416
Priority MEDIUM 41

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-284
Priority MEDIUM 43

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01694 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-502
Priority MEDIUM 41

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-1390
Load more