CVE-2023-21713

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Sql Server

CVE-2023-21705

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Sql Server

CVE-2023-21704

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Sql Server

CVE-2023-21568

Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Sql Server Sql Server 2019 Integration Services Sql Server 2022 Integration Services

CVE-2023-21528

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Sql Server

CVE-2022-29143

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Sql Server

CVE-2026-67625

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 (gdr) Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 (gdr) and 9 more

CVE-2026-85886

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more

CVE-2026-68883

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 (gdr) Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 (gdr) and 10 more

CVE-2026-70189

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 6 more

CVE-2026-88085

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 6 more

CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability

Microsoft SQL Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 6.5% KEV · Not listed

Vendors

Microsoft

Products

Sql Server

CVE-2026-88084

Microsoft SQL Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Sql Server 2019 Sql Server 2025

CVE-2026-67628

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 (gdr) Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 (gdr) and 9 more

CVE-2026-88088

Microsoft SQL Server Elevation of Privilege Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 For X64-based Systems (gdr) and 4 more

CVE-2026-85876

Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 For X64-based Systems (gdr) and 4 more

CVE-2026-67626

Microsoft SQL Server Denial of Service Vulnerability

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2022 (gdr) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more

CVE-2026-88082

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 For X64-based Systems (gdr) and 4 more

CVE-2026-88083

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2022 (gdr) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more

CVE-2026-85888

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2017 (gdr) Microsoft Sql Server 2017 For X64-based Systems \(cu31\) Microsoft Sql Server 2019 (gdr) and 8 more