Microsoft SQL Server Remote Code Execution Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jul 15, 2019 · Catalog

   Detected

   A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

2. Aug 26, 2026 · CISA KEV

   Known exploited

   Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating

3. Aug 26, 2026 · Catalog

   Updated

   A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

4. Aug 29, 2026 · CISA KEV

   Remediation due

   Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating

Affected

• cpe microsoft/sql server2014
• cpe microsoft/sql server 2016version unspecified
• cpe microsoft/sql server 2017version unspecified
• vendor Microsoft SQL Serverversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2019-1068

  Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.

  cisa.gov
• CVE.orgVulnerability recordCVE-2019-1068

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2019-1068

  30-day exploitation probability 57.3%

  first.org
• NIST NVDVulnerability recordCVE-2019-1068

  A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• CISA note · portal.msrc.microsoft.com
• US Government Resource · cisa.gov
• CISA note · cisa.gov
• CISA note · cisa.gov