Microsoft Microsoft SQL Server vulnerabilities (CVE)

CVE records published for Microsoft Microsoft SQL Server, newest first. Follow to get an email when a new one appears.

3 results
9.8Critical
CVE-2020-0618 KEV Used in ransomware

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server; Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR); Microsoft Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU); Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

99%EPSS
8.8High
CVE-2019-1068 KEV

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR); Microsoft Microsoft SQL Server; Microsoft Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR); Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

57%EPSS
Unscored
CVE-2018-8273
Microsoft Microsoft SQL Server

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

31%EPSS