Vulnerabilidades de Microsoft Microsoft SQL Server 2025 (CU8) (CVE)

Registros CVE publicados para Microsoft Microsoft SQL Server 2025 (CU8), los más recientes primero. Siga el producto para recibir un correo con cada nueva.

58 resultados
7.0Alta
CVE-2026-85876

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

6.6Media
CVE-2026-83945

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 (CU8); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

8.8Alta
CVE-2026-77481

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Media
CVE-2026-67645

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (CU 32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-67624

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

8.8Alta
CVE-2026-66819

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

5.5Media
CVE-2026-77488

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

7.0Alta
CVE-2026-77485

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

8.8Alta
CVE-2026-77487

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Alta
CVE-2026-77484

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

1.7%EPSS
8.8Alta
CVE-2026-77483

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Alta
CVE-2026-77480

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Alta
CVE-2026-73028

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.1Alta
CVE-2026-47297

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

1.1%EPSS
6.5Media
CVE-2026-68780

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-68779

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-68778

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-68777

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-68776

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

8.8Alta
CVE-2026-68775

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Media
CVE-2026-67648

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-67641

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2025 (CU8); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

1.1%EPSS
8.8Alta
CVE-2026-67639

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.