Unscored

CVE-2018-8273

Microsoft Microsoft SQL Server Published: 2018-08-15 20:00 (8 years ago)

Description

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Microsoft	Microsoft SQL Server	2016 for x64-based Systems Service Pack 1, 2016 for x64-based Systems Service Pack 1 (CU), 2016 for x64-based Systems Service Pack 2, 2016 for x64-based Systems Service Pack 2 (CU), 2017 for x64-based Systems, 2017 for x64-based Systems (CU)

References and patches

1041467 vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273
104967 vdb-entry

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

31.16%

higher than 98% of all CVEs

Timeline

ID reserved2018-03-14
Published2018-08-15 20:00
Reached IP-DB2026-10-25 00:05
Last updated2024-08-05 09:46

Assigned by (CNA): microsoft

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Microsoft SQL Server

8.8High

CVE-2026-118120 3 days ago

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.1%EPSS

8.0High

CVE-2026-118118 3 days ago

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

8.0High

CVE-2026-118119 3 days ago

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

7.0High

CVE-2026-118116 3 days ago

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

1.9%EPSS

8.0High

CVE-2026-118117 3 days ago

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

7.5High

CVE-2026-118114 3 days ago

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.