Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)
91 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-94520 | | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM 4.9 | 0.8 % | ||
| CVE-2026-94512 | | SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.7 % | ||
| CVE-2026-88089 | | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2026-88088 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.0 | 0.2 % | ||
| CVE-2026-88086 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-88085 | | Microsoft SQL Server Elevation of Privilege Vulnerability | MEDIUM 6.4 | 0.2 % | ||
| CVE-2026-85919 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.0 | 0.2 % | ||
| CVE-2026-88083 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-88082 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.0 | 0.2 % | ||
| CVE-2026-88081 | | Microsoft SQL Server Information Disclosure Vulnerability | HIGH 7.7 | 0.8 % | ||
| CVE-2026-85888 | | Microsoft SQL Server Information Disclosure Vulnerability | HIGH 7.7 | 0.8 % | ||
| CVE-2026-67628 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 4.9 | 0.8 % | ||
| CVE-2026-67626 | 17.0.1050.2 – < 17.0.1145.4 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-65674 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 1.6 % | ||
| CVE-2026-85886 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.5 | 0.4 % | ||
| CVE-2026-85876 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.0 | 0.2 % | ||
| CVE-2026-83945 | 17.0.1050.2 – < 17.0.1145.4 | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM 6.6 | 0.6 % | ||
| CVE-2026-70189 | | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2026-68883 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.5 | 0.6 % | ||
| CVE-2026-67625 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.5 | 0.6 % | ||
| CVE-2026-96956 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.0 | 0.6 % | ||
| CVE-2026-77481 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67645 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67624 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67369 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-66819 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-77488 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 5.5 | 0.4 % | ||
| CVE-2026-77485 | | SQL Server Elevation of Privilege Vulnerability | HIGH 7.0 | 0.3 % | ||
| CVE-2026-77487 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-77484 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 1.7 % | ||
| CVE-2026-77483 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-77480 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-73028 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-47297 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.1 | 1.1 % | ||
| CVE-2026-68780 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68779 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68778 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68777 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68776 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68775 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67648 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67642 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67641 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2026-67639 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67638 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67393 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67390 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67388 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67386 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67385 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67381 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67380 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-66820 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-66818 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-66816 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Security Feature Bypass Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-66814 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-73029 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68786 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67643 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.0 % | ||
| CVE-2026-67636 | | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.0 | 0.7 % | ||
| CVE-2026-67389 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67384 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67383 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67379 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.5 | 0.7 % | ||
| CVE-2026-67376 | | Microsoft SQL Server Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-67378 | | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.0 | 0.7 % | ||
| CVE-2026-68787 | | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-68785 | | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM 4.9 | 1.1 % | ||
| CVE-2026-68784 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-68781 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67633 | | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2026-67631 | | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.0 % | ||
| CVE-2026-67630 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67629 | | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-67373 | 17.0.1050.2 – < 17.0.1135.8 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-67370 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-67368 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-54116 | 17.0.1050.2 – < 17.0.1125.2 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-50468 | 17.0.1050.2 – < 17.0.1125.2 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-47295 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-55002 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-54118 | | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.5 % | ||
| CVE-2026-54117 | 17.0.1050.2 – < 17.0.1125.2 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.5 % | ||
| CVE-2026-47296 | | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2026-40370 | | SQL Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-32176 | | SQL Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-32167 | | SQL Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-26116 | 17.0.1050.2 – < 17.0.1105.2 | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2026-26115 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.1 % | ||
| CVE-2026-21262 | | SQL Server Elevation of Privilege Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2026-20803 | 17.0.1050.2 – < 17.0.1050.2 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH 7.2 | 1.2 % |