Microsoft Sql_server
110 CVEs affecting Microsoft Sql_server. Latest disclosed: 2024-01-09. Critical: 1, High: 31.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8273 | Critical | 9.8 | 2018-08-15 | A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remo… |
CVE-2023-38169 | High | 8.8 | 2023-08-08 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-21713 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21705 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2021-1636 | High | 8.8 | 2021-01-12 | Microsoft SQL Elevation of Privilege Vulnerability |
CVE-2020-0618 | High | 8.8 | 2020-02-11 | A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Re… |
CVE-2019-1068 | High | 8.8 | 2019-07-15 | A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Re… |
CVE-2016-7254 | High | 8.8 | 2016-11-10 | Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileg… |
CVE-2016-7253 | High | 8.8 | 2016-11-10 | The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticat… |
CVE-2016-7250 | High | 8.8 | 2016-11-10 | Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain p… |
CVE-2016-7249 | High | 8.8 | 2016-11-10 | Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown ve… |
CVE-2012-1856 | High | 8.8 | 2012-08-15 | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Offi… |
CVE-2024-0056 | High | 8.7 | 2024-01-09 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability |
CVE-2009-2502 | High | 8.1 | 2009-10-14 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2… |
CVE-2023-36785 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36730 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36420 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36417 | High | 7.8 | 2023-10-10 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-32028 | High | 7.8 | 2023-06-16 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-32027 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |