Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Microsoft

Microsoft Microsoft SQL Server vulnerabilities

3 published CVEs name Microsoft Microsoft SQL Server among the affected products; CISA lists 2 of them as exploited in the wild.

Published CVEs
3
Last 12 months
0
Critical
2
Known exploited
2

Critical 2High 1Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20181
  2. 20191
  3. 20201

Known exploitedNewest addition to KEV first

  • CVE-2019-1068

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server…

    Microsoft · Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)

    ExploitedHigh8.8
  • CVE-2020-0618

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server…

    Microsoft · Microsoft SQL Server

    ExploitedCritical9.8

Newest CVEs

  • CVE-2020-0618

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server…

    Microsoft · Microsoft SQL Server

    ExploitedCritical9.8
  • CVE-2019-1068

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server…

    Microsoft · Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)

    ExploitedHigh8.8
  • CVE-2018-8273

    A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server…

    Microsoft · Microsoft SQL Server

    Critical9.8