Microsoft
microsoft
17,821 CVEs • 1,094 products
Products (1,094)
Click to collapseToggle
Products (1,094)
Click to collapse
CVEs (17,821)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 3Sql Server 2019 Sql Server 2022Sql Server 2025Sep 16, 2026 Sep 8, 2026 N/A· v4 8.5 HIGH· v3 N/A· v2 Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 3Sql Server 2019 Sql Server 2022Sql Server 2025Sep 17, 2026 Sep 8, 2026 N/A· v4 9.0 CRITICAL· v3 N/A· v2 Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. |
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 15, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network. |
1Microsoft 2Sql Server 2022 Sql Server 2025Sep 16, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network. |
1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 moreSep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. |