Product by Microsoft
Microsoft SQL Server 2022 (gdr)
196 known vulnerabilities in Microsoft SQL Server 2022 (gdr) (Microsoft), 0 of them actively exploited (CISA KEV).
Key figures
196
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2025-49719 | Microsoft SQL Server Information Disclosure Vulnerability | 7.5 | |
| High | CVE-2026-77484 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2025-49718 | Microsoft SQL Server Information Disclosure Vulnerability | 7.5 | |
| High | CVE-2026-21262 | SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2024-28910 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2026-67643 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2024-29985 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28934 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28933 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28936 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28932 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28931 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28909 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28906 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-29984 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-29983 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-29982 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28929 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28930 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28908 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-29046 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28944 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-28940 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | 8.8 |
News
- NCSC-2026-0350 [1.00] [M/H] Kwetsbaarheden verholpen in SQL Serverncsc-nl,
- Patch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bugcsoonline,
- NCSC-2026-0232 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft SQL Serverncsc-nl,
- SSA-472448 V1.0: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Videosiemens-productcert