What’s Vulnerable › Products

Microsoft SQL Server vulnerabilities

147 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 96 published in the last 12 months.

Check whether your Microsoft SQL Server version is affected

Exploited Microsoft SQL Server vulnerabilities

• CVE-2019-1068 — Microsoft SQL Server Remote Code Execution Vulnerability

Latest Microsoft SQL Server vulnerabilities

• CVE-2026-78442 — Windows OLE DB Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-78441 — Windows OLE DB Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-77488 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2026-77487 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-77486 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-77485 — SQL Server Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-77483 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-77482 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-77481 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-77480 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-73028 — SQL Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-69562 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68787 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-68786 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-68785 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 4.9)
• CVE-2026-68784 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68781 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68780 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68779 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68778 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68777 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68776 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-68775 — Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-67648 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-67645 — Microsoft SQL Server Information Disclosure Vulnerability (CVSS 6.5)