Microsoft SQL Server vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
107 matching records
- High8.0Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.60%Oct 13, 2026
- Medium4.9Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.Check if you run itEPSS 0.84%Oct 13, 2026
- High8.8Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.65%Oct 13, 2026
- Medium6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.0Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.3Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.Check if you run itEPSS 0.36%Oct 13, 2026
- Medium6.4Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- Medium5.3Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.Check if you run itEPSS 0.68%Oct 13, 2026
- High7.5Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.50%Oct 13, 2026
- High7.0Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.80%Oct 13, 2026
- High7.0Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.80%Oct 13, 2026
- High8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.40%Oct 13, 2026
- High7.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.20%Oct 13, 2026
- Medium6.6Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.56%Oct 13, 2026
- Medium6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.Check if you run itEPSS 0.33%Oct 13, 2026
- High8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.56%Oct 13, 2026
- Medium4.9Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.80%Oct 13, 2026
- Medium6.5Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.Check if you run itEPSS 0.88%Oct 13, 2026
- High8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.56%Oct 13, 2026
- High8.8Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.62%Oct 13, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder.Check if you run itEPSS 0.38%Oct 8, 2026
- High8.8Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Sep 8, 2026
- High8.8External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.56%May 12, 2026