Microsoft SQL Server Management Studio
7 CVEs affecting Microsoft SQL Server Management Studio. Latest disclosed: 2025-04-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-29803 | High | 7.3 | 2025-04-12 | Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges l… |
CVE-2019-1376 | Medium | 6.5 | 2019-10-10 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Manage… |
CVE-2019-1313 | Medium | 6.5 | 2019-10-10 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Manage… |
CVE-2018-8533 | Medium | 5.5 | 2018-10-10 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an… |
CVE-2018-8532 | Medium | 5.5 | 2018-10-10 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an… |
CVE-2018-8527 | Medium | 5.5 | 2018-10-10 | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an… |
CVE-2020-1455 | Medium | 5.3 | 2020-08-17 | A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerabili… |