CVEs (141)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJul 22, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJul 22, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJul 22, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJul 16, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJun 18, 2026 May 12, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJul 24, 2026 Apr 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJun 17, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJun 17, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJun 17, 2026 Mar 10, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJun 17, 2026 Mar 10, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 5Sql Server 2016 Sql Server 2017Sql Server 2019+2 moreJul 10, 2026 Mar 10, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Nov 11, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Sep 9, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Sep 9, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Aug 12, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Aug 12, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Aug 12, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Aug 12, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 moreJun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. |
1Microsoft 2Sql Server 2019 Sql Server 2022Jun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network. |