What’s Vulnerable › Products

Microsoft SQL Server vulnerabilities

100 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 51 published in the last 12 months.

Check whether your Microsoft SQL Server version is affected

Exploited Microsoft SQL Server vulnerabilities

• CVE-2019-1068 — Microsoft SQL Server Remote Code Execution Vulnerability

Latest Microsoft SQL Server vulnerabilities

• CVE-2026-47295 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-55002 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-54118 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-54117 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-47296 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-40370 — SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-32176 — SQL Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-33120 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-32167 — SQL Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-26116 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-26115 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-21262 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-59499 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-55227 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-47997 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2025-49759 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-24999 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-53727 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-49758 — Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2025-49719 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2024-49021 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2024-49018 — SQL Server Native Client Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-49017 — SQL Server Native Client Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-49016 — SQL Server Native Client Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-49015 — SQL Server Native Client Remote Code Execution Vulnerability (CVSS 8.8)