Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR)
95 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-47295 | 13.0.0 – < 13.0.6500.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-55002 | 13.0.0 – < 13.0.6500.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-54118 | 13.0.0 – < 13.0.6500.1 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.5 % | ||
| CVE-2026-47296 | 13.0.0 – < 13.0.6500.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2026-40370 | 13.0.0 – < 13.0.6490.1 | SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-32176 | 13.0.0 – < 13.0.6485.1 | SQL Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-32167 | 13.0.0 – < 13.0.6485.1 | SQL Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-26115 | 13.0.0 – < 13.0.6480.4 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.1 % | ||
| CVE-2026-21262 | 13.0.0 – < 13.0.6480.4 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2025-59499 | 13.0.0 – < 13.0.6475.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2025-55227 | 13.0.0 – < 13.0.6470.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2025-47997 | 13.0.0 – < 13.0.6470.1 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2025-49759 | 13.0.0 – < 13.0.6465.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2025-24999 | 13.0.0 – < 13.0.6465.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2025-53727 | 13.0.0 – < 13.0.6465.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2025-49758 | 13.0.0 – < 13.0.6465.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2024-49021 | 13.0.0 – < 13.0.6455.2 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.8 % | ||
| CVE-2024-49018 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-49017 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49016 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49015 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49014 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49013 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49012 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49011 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49010 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49009 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49008 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49006 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49007 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49005 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49004 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49003 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49002 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49001 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-49000 | 13.0.0 – < 13.0.6460.7 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-48999 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-48998 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-48997 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-48993 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-49043 | 13.0.0 – < 13.0.6455.2 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2024-48996 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-48995 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-48994 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-43462 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-43459 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-38255 | 13.0.0 – < 13.0.6455.2 | SQL Server Native Client Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-37980 | 13.0.0 – < 13.0.6445.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | CRITICAL 9.8 | 1.4 % | ||
| CVE-2024-37341 | 13.0.0 – < 13.0.6450.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | CRITICAL 9.8 | 1.4 % | ||
| CVE-2024-37965 | 13.0.0 – < 13.0.6445.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-35256 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-28928 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37336 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-37333 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37330 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37329 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37328 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37327 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37326 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-21449 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37324 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37323 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37322 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37321 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37320 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-37319 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-21425 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-21331 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-21317 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-21308 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-21303 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2024-20701 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2024-35272 | | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-35271 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-37331 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-37332 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-37318 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-21428 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2024-21415 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2024-21414 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-21398 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2024-21373 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2024-21335 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2024-21333 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2024-21332 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2024-38088 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2024-38087 | 13.0.0 – < 13.0.6441.1 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2023-36728 | | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM 5.5 | 0.7 % | ||
| CVE-2023-23384 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.3 | 0.9 % | ||
| CVE-2023-21713 | 13.0.0 – < 13.0.6430.49 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 1.8 % | ||
| CVE-2023-21718 | | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.7 % | ||
| CVE-2023-21705 | 13.0.0 – < 13.0.6430.49 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 1.1 % | ||
| CVE-2023-21704 | 13.0.0 – < 13.0.6430.49 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2023-21528 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2022-29143 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.5 | 2.0 % |