Microsoft Microsoft SQL Server 2025 (CU8) Schwachstellen (CVE)

Für Microsoft Microsoft SQL Server 2025 (CU8) veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

58 Ergebnisse
7.0Hoch
CVE-2026-85876

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

6.6Mittel
CVE-2026-83945

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 (CU8); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

8.8Hoch
CVE-2026-77481

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Mittel
CVE-2026-67645

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Mittel
CVE-2026-67624

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

8.8Hoch
CVE-2026-66819

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

5.5Mittel
CVE-2026-77488

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

7.0Hoch
CVE-2026-77485

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

8.8Hoch
CVE-2026-77487

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Hoch
CVE-2026-77484

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

1.7%EPSS
8.8Hoch
CVE-2026-77483

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Hoch
CVE-2026-77480

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Hoch
CVE-2026-73028

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.1Hoch
CVE-2026-47297

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

1.1%EPSS
6.5Mittel
CVE-2026-68780

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Mittel
CVE-2026-68779

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Mittel
CVE-2026-68778

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Mittel
CVE-2026-68777

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Mittel
CVE-2026-68776

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

8.8Hoch
CVE-2026-68775

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Mittel
CVE-2026-67648

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

6.5Mittel
CVE-2026-67641

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2025 (CU8); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

1.1%EPSS
8.8Hoch
CVE-2026-67639

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.