Microsoft Sql Server vulnerabilities and fixes
Exploited and high-severity Microsoft Sql Server vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.0CVE-2026-96956Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.Fix availableMicrosoft Sql Server 2017
1 min read - 8.8CVE-2026-94512Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Fix availableMicrosoft Sql Server 2017
1 min read - 7.0CVE-2026-88088Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2019 (GDR)
1 min read - 7.7CVE-2026-88081Microsoft SQL Server Information Disclosure VulnerabilityFix availableMicrosoft Microsoft SQL Server 2017 (GDR)
1 min read - 7.0CVE-2026-88082Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2019 (GDR)
1 min read - 7.5CVE-2026-88083Microsoft SQL Server Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SQL Server 2022 (GDR)
1 min read - 7.0CVE-2026-85919Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2019 (GDR)
1 min read - 8.5CVE-2026-85886Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Fix availableMicrosoft Sql Server 2017
1 min read - 7.0CVE-2026-85876Use after free in SQL Server allows an authorized attacker to elevate privileges locally.Fix availableMicrosoft Sql Server 2019
1 min read - 8.8CVE-2026-65674Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.RCEFix availableMicrosoft Sql Server 2019
1 min read - 8.5CVE-2026-68883Microsoft SQL Server Elevation of Privilege VulnerabilityFix availableMicrosoft Microsoft SQL Server 2017 (GDR)
1 min read - 8.5CVE-2026-67625Microsoft SQL Server Remote Code Execution VulnerabilityFix availableMicrosoft Microsoft SQL Server 2017 (GDR)
1 min read - 8.8CVE-2019-1068Microsoft SQL Server Remote Code Execution VulnerabilityRCEExploitedVerify fixMicrosoft SQL Server
1 min read