microsoft sql server 2025 güvenlik açıkları (CVE)

microsoft sql server 2025 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

92 sonuç
4.9Orta
CVE-2026-94520

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

8.8Yüksek
CVE-2026-94512

SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.7Orta
CVE-2026-88089

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

7.0Yüksek
CVE-2026-88088

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

5.3Orta
CVE-2026-88086

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

6.4Orta
CVE-2026-88085

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.0Yüksek
CVE-2026-85919

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.5Yüksek
CVE-2026-88083

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

7.0Yüksek
CVE-2026-88082

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.7Yüksek
CVE-2026-88081

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

7.7Yüksek
CVE-2026-85888

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

4.9Orta
CVE-2026-67628

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Orta
CVE-2026-67626

Microsoft SQL Server Denial of Service Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

8.8Yüksek
CVE-2026-65674

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

1.6%EPSS
8.5Yüksek
CVE-2026-85886

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

7.0Yüksek
CVE-2026-85876

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32); Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

6.6Orta
CVE-2026-83945

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR); Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27); Microsoft Microsoft SQL Server 2025 (CU8); Microsoft Microsoft SQL Server 2025 for x64-based Systems (CU9)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.7Orta
CVE-2026-70189

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

8.5Yüksek
CVE-2026-68883

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

8.5Yüksek
CVE-2026-67625

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

8.0Yüksek
CVE-2026-96956

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-77481

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5Orta
CVE-2026-67645

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR); Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5Orta
CVE-2026-67624

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft Microsoft SQL Server 2019 (CU 32); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQL Server 2022 (CU 26); Microsoft Microsoft SQL Server 2022 (GDR)

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.