What’s Vulnerable › Vulnerabilities

CVE-2018-8273

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 31.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-15 · updated 2026-06-17
• Weakness: CWE-787

Description

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

Affected products

• Microsoft SQL Server: 2016-sp1, 2016-sp2, 2017
• Microsoft SQL Server: 2016 for x64-based Systems Service Pack 1, 2016 for x64-based Systems Service Pack 1 (CU), 2016 for x64-based Systems Service Pack 2, 2016 for x64-based Systems Service Pack 2 (CU), 2017 for x64-based Systems, 2017 for x64-based Systems (CU)

References

• http://www.securityfocus.com/bid/104967
• http://www.securitytracker.com/id/1041467
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273
• http://www.securityfocus.com/bid/104967
• http://www.securitytracker.com/id/1041467
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273

Get alerted when CVE-2018-8273 or the next vulnerability affects your stack