CVE-2019-1068

CVE-2019-1068 is a remote code execution vulnerability in Microsoft SQL Server caused by a stack overflow in the svl.dll component during processing of internal functions. An authenticated attacker (low privileges) can trigger it remotely via a specially crafted SQL query , gaining code execution...

CVE-2019-0819

CVE-2019-0819 is an information-disclosure vulnerability in Microsoft SQL Server Analysis Services where metadata permissions are not enforced correctly. Exploitation requires credentials to access an affected Analysis Services database, potentially leaking restricted data due to flaws in Object-...