microsoft sql server 2017 güvenlik açıkları (CVE)

microsoft sql server 2017 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

79 sonuç
4.9Orta
CVE-2026-94520

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

8.8Yüksek
CVE-2026-94512

SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.7Orta
CVE-2026-88089

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

6.4Orta
CVE-2026-88085

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.7Yüksek
CVE-2026-88081

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

7.7Yüksek
CVE-2026-85888

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

4.9Orta
CVE-2026-67628

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

8.5Yüksek
CVE-2026-85886

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.7Orta
CVE-2026-70189

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

8.5Yüksek
CVE-2026-68883

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

8.5Yüksek
CVE-2026-67625

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

8.0Yüksek
CVE-2026-96956

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-77481

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Orta
CVE-2026-67645

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

8.8Yüksek
CVE-2026-66819

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-78442

Windows OLE DB Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

6.5Orta
CVE-2026-78441

Windows OLE DB Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

6.5Orta
CVE-2026-69562

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

5.5Orta
CVE-2026-77488

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

8.8Yüksek
CVE-2026-77486

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

7.0Yüksek
CVE-2026-77485

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

8.8Yüksek
CVE-2026-77487

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-77483

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-77480

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-73028

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.