5693 matches found
Vulnerabilities in Microsoft SQL Server
Microsoft has addressed vulnerabilities in various components of SQL Server. A malicious individual could exploit these vulnerabilities to gain elevated privileges, execute arbitrary code, and/or access sensitive data. SQL Server: | CVE-ID | CVSS | Impact | |-------|------|---------| |...
CVE-2026-47295
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-55002
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-54117
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-54118
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability
...
EUVD-2026-44225
Access of resource using incompatible type 'type confusion' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-54116
CVE-2026-54116 impacts Microsoft SQL Server components via a type-confusion flaw that could allow an authenticated, low-privilege attacker to disclose information over the network. The CVSSv3.1 base score is 6.5 (Medium); impact is confined to confidentiality. Affected products are SQL Server (pe...
CVE-2026-50468
CVE-2026-50468 affects Microsoft SQL Server. It is a buffer over-read that allows an authorized attacker to disclose information over the network. The published advisories indicate an impact of accessing sensitive data with a network attack vector and low privileges required; CVSS 3.1 base score ...
CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability
...
EUVD-2026-44224
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-47295
CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-55002
Technical details about CVE-2026-55002 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-54118
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...