5291 matches found
The vulnerability of the Microsoft SQL Server database management system arises from incorrect validation of specified data types. This allows attackers to escalate their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to incorrect validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2019-25475: Out-of-bounds Write
SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition...
The vulnerability of the Microsoft SQL Server database management system, related to deficiencies in access control mechanisms, allows attackers to increase their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
Patch Tuesday - March 2026
Microsoft is publishing 77 vulnerabilities this March 2026 Patch Tuesday. Microsoft is aware of public disclosure of two of today’s vulnerabilities, but without evidence of exploitation in the wild for any yet, so there are no Microsoft additions to CISA KEV today. Earlier in the month, Microsoft...
Vulnerabilities fixed in Microsoft SQL Server
Microsoft has fixed vulnerabilities in SQL Server. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges and potentially execute SQL Statements with Sysadmin privileges. For successful abuse, the malicious party must have prior authorizations as a user. Of th...
EUVD-2026-10683
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10684
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26115
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26116
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-21262
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-21262
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26115
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability
...
KB5077472 - Description of the security update for SQL Server 2017 GDR: March 10, 2026
None None...