What’s Vulnerable › Products

Microsoft SQL Server 2019 (GDR) vulnerabilities

27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.

Check whether your Microsoft SQL Server 2019 (GDR) version is affected

Latest Microsoft SQL Server 2019 (GDR) vulnerabilities

• CVE-2026-96956 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.0)
• CVE-2026-94520 — Microsoft SQL Server Denial of Service Vulnerability (CVSS 4.9)
• CVE-2026-94512 — SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-88089 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 6.7)
• CVE-2026-88088 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-88086 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2026-88085 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 6.4)
• CVE-2026-88084 — Microsoft SQL Server Denial of Service Vulnerability (CVSS 5.3)
• CVE-2026-88082 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-88081 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 7.7)
• CVE-2026-85919 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-85888 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 7.7)
• CVE-2026-85886 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.5)
• CVE-2026-85876 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-70189 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 6.7)
• CVE-2026-68883 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.5)
• CVE-2026-67628 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 4.9)
• CVE-2026-67625 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.5)
• CVE-2026-65674 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-77482 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-68781 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-67633 — Microsoft SQL Server Denial of Service Vulnerability (CVSS 6.5)
• CVE-2026-67631 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-67630 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-67629 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)