Product by Microsoft
Microsoft SQL Server 2017
147 known vulnerabilities in Microsoft SQL Server 2017 (Microsoft), 1 of them actively exploited (CISA KEV).
Key figures
147
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2019-1068 | Microsoft SQL Server Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| High | CVE-2025-49719 | Microsoft SQL Server Information Disclosure Vulnerability | 7.5 | |
| Critical | CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2026-54117 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2026-21262 | SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| Critical | CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2026-67368 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-66819 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-66820 | SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-67370 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2025-24999 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-67376 | Microsoft SQL Server Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-68775 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67388 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67385 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67380 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-77481 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67381 | Microsoft SQL Server Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-67639 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-68786 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-67384 | Microsoft SQL Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-35271 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-37332 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-35272 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-37318 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | 8.8 |
News
- NCSC-2026-0350 [1.00] [M/H] Kwetsbaarheden verholpen in SQL Serverncsc-nl,
- CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation Deadlinessans-newsbites-mail,
- CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugsthehackernews,
- Patch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bugcsoonline,
- NCSC-2026-0232 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft SQL Serverncsc-nl,