What’s Vulnerable › Products

Microsoft SQL Server vulnerabilities

108 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Microsoft SQL Server version is affected

Exploited Microsoft SQL Server vulnerabilities

• CVE-2019-1068 — Microsoft SQL Server Remote Code Execution Vulnerability
• CVE-2020-0618 — Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
• CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Latest Microsoft SQL Server vulnerabilities

• CVE-2024-28934 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-0056 — Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability (CVSS 8.7)
• CVE-2023-36785 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36417 — Microsoft SQL OLE DB Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36420 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-36728 — Microsoft SQL Server Denial of Service Vulnerability (CVSS 5.5)
• CVE-2023-36730 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-38169 — Microsoft SQL OLE DB Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2023-29349 — Microsoft ODBC and OLE DB Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-32028 — Microsoft SQL OLE DB Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-32027 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-32026 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-32025 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-29356 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-23384 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.3)
• CVE-2023-21713 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2023-21718 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-21705 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2023-21704 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2023-21528 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2022-29143 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 6.0)
• CVE-2022-23276 — SQL Server for Linux Containers Elevation of Privilege Vulnerability (CVSS 4.6)
• CVE-2021-1636 — Microsoft SQL Elevation of Privilege Vulnerability (CVSS 6.5)
• CVE-2020-0618 — Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability (CVSS 8.8) — exploited
• CVE-2019-1068 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8) — exploited