Vulnerabilidades de microsoft sql server 2025 (CVE)

Registros CVE publicados para microsoft sql server 2025, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

92 resultados
4.9Media
CVE-2026-94520

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

8.8Alta
CVE-2026-94512

SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.7Media
CVE-2026-88089

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

7.0Alta
CVE-2026-88088

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

5.3Media
CVE-2026-88086

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

6.4Media
CVE-2026-88085

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.0Alta
CVE-2026-85919

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.5Alta
CVE-2026-88083

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

7.0Alta
CVE-2026-88082

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.7Alta
CVE-2026-88081

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

7.7Alta
CVE-2026-85888

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

4.9Media
CVE-2026-67628

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-67626

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

8.8Alta
CVE-2026-65674

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

1.6%EPSS
8.5Alta
CVE-2026-85886

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

7.0Alta
CVE-2026-85876

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

6.6Media
CVE-2026-83945

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 (CU8); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.7Media
CVE-2026-70189

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

8.5Alta
CVE-2026-68883

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

8.5Alta
CVE-2026-67625

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

8.0Alta
CVE-2026-96956

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Alta
CVE-2026-77481

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Media
CVE-2026-67645

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Media
CVE-2026-67624

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.