Microsoft Microsoft SQL Server 2019 (CU 32)
71 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-77481 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67645 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67624 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-66819 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-78442 | 15.0.0.0 – < 15.0.4490.9 | Windows OLE DB Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-78441 | 15.0.0.0 – < 15.0.4490.9 | Windows OLE DB Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-69562 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-77488 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 5.5 | 0.4 % | ||
| CVE-2026-77486 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-77485 | 15.0.0.0 – < 15.0.4490.9 | SQL Server Elevation of Privilege Vulnerability | HIGH 7.0 | 0.3 % | ||
| CVE-2026-77487 | 15.0.0.0 – < 15.0.4490.9 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-77484 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2026-77483 | 15.0.0.0 – < 15.0.4490.9 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-77480 | 15.0.0.0 – < 15.0.4490.9 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-73028 | 15.0.0.0 – < 15.0.4490.9 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-47297 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.1 | 1.1 % | ||
| CVE-2026-68780 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68779 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68778 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68777 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68776 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68775 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67648 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67639 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67393 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67390 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67388 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67386 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67385 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67381 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67380 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-66820 | 15.0.0.0 – < 15.0.4490.9 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-66818 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-66814 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-73029 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68786 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67636 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.0 | 0.7 % | ||
| CVE-2026-67384 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67379 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.5 | 0.7 % | ||
| CVE-2026-67376 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-67378 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.0 | 0.7 % | ||
| CVE-2026-68787 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-68785 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM 4.9 | 1.1 % | ||
| CVE-2026-68784 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68781 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67633 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2026-67631 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.0 % | ||
| CVE-2026-67630 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67629 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67370 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-67368 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-77482 | 15.0.0.0 – < 15.0.4490.9 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-47295 | 15.0.0.0 – < 15.0.4480.2 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-55002 | 15.0.0.0 – < 15.0.4480.2 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-54118 | 15.0.0.0 – < 15.0.4480.2 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.5 % | ||
| CVE-2026-47296 | 15.0.0.0 – < 15.0.4480.2 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2026-40370 | 15.0.0.0 – < 15.0.4470.1 | SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-32176 | | SQL Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-32167 | 15.0.0.0 – < 15.0.4465.1 | SQL Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-26115 | 15.0.0.0 – < 15.0.4460.4 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.1 % | ||
| CVE-2026-21262 | 15.0.0.0 – < 15.0.4460.4 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2025-59499 | 15.0.0.0 – < 15.0.4455.2 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2025-55227 | 15.0.0.0 – < 15.0.4445.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2025-47997 | 15.0.0.0 – < 15.0.4445.1 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2025-49759 | 15.0.0.0 – < 15.0.4440.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2025-24999 | 15.0.0.0 – < 15.0.4440.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2025-53727 | 15.0.0.0 – < 15.0.4440.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2025-49758 | 15.0.0.0 – < 15.0.4440.1 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2025-49718 | 15.0.0.0 – < 15.0.4435.7 | Microsoft SQL Server Information Disclosure Vulnerability | HIGH 7.5 | 3.9 % | ||
| CVE-2025-49719 | 15.0.0.0 – < 15.0.4435.7 | Microsoft SQL Server Information Disclosure Vulnerability | HIGH 7.5 | 15 % | ||
| CVE-2025-49717 | 15.0.0.0 – < 15.0.4435.7 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.5 | 1.1 % |