Product by Microsoft
Microsoft SQL Server 2017 (cu 31)
150 known vulnerabilities in Microsoft SQL Server 2017 (cu 31) (Microsoft), 0 of them actively exploited (CISA KEV).
Key figures
150
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2025-49719 | Microsoft SQL Server Information Disclosure Vulnerability | 7.5 | |
| Critical | CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2026-21262 | SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| Critical | CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2026-67368 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-66819 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-66820 | SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-67370 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2025-24999 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-67376 | Microsoft SQL Server Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-68775 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67388 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67385 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67380 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-77481 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67381 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-67639 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-68786 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67384 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-35271 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-37332 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-35272 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-37318 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-37331 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-21414 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 |