Sql Server 2017

sql_server_2017

Vendor: Microsoft • 147 CVEs

CVEs (147)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-68777 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68776 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68775 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67648 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67645 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67639 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67633 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67631 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 17, 2026 Sep 8, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67630 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Oct 2, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67629 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Oct 2, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67393 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 15, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67388 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67386 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67385 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67384 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67381 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67376 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67370 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Previous 123 4 5...8 Next