Microsoft Microsoft SQL Server 2017 (Gdr)
163 CVEs affecting Microsoft Microsoft SQL Server 2017 (Gdr). Latest disclosed: 2026-10-13. Critical: 2, High: 133.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-67631 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-54118 | Critical | 9.8 | 2026-07-14 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-94512 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-78442 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. |
CVE-2026-77487 | High | 8.8 | 2026-09-08 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-77486 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-77483 | High | 8.8 | 2026-09-08 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-77482 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-77481 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-77480 | High | 8.8 | 2026-09-08 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-73028 | High | 8.8 | 2026-09-08 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68786 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68775 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67639 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67388 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67385 | High | 8.8 | 2026-09-08 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67384 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67381 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-67380 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67370 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |