Known vulnerabilities in Microsoft SQL Server 2022 GDR

Vendor: Microsoft
Software: Microsoft SQL Server
Version: 2022 GDR
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SQL Server version 2022 GDR Microsoft SQL Server 2022 GDR is affected by 39 vulnerabilities: 36 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121347 - Missing Authentication for Critical Function
CVE-2026-20803		 CWE-306 Low
No
No
 - 13.01.2026 SB20260113135
#VU118288 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-59499		 CWE-89 Medium
No
No
 - 11.11.2025 SB2025111157
#VU115079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47997		 CWE-362 Medium
No
No
 - 09.09.2025 SB2025090982
SB2025110342
#VU88314 - Integer underflow
CVE-2024-28930		 CWE-191 High
No
No
 - 09.04.2024 SB2024040976
#VU88312 - Heap-based Buffer Overflow
CVE-2024-28932		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88308 - Heap-based Buffer Overflow
CVE-2024-28943		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88306 - Heap-based Buffer Overflow
CVE-2024-28937		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88288 - Integer overflow
CVE-2024-28929		 CWE-190 High
No
No
 - 09.04.2024 SB2024040976
#VU88287 - Integer overflow
CVE-2024-28931		 CWE-190 High
No
No
 - 09.04.2024 SB2024040976
#VU88284 - Integer overflow
CVE-2024-28936		 CWE-190 High
No
No
 - 09.04.2024 SB2024040976
#VU88282 - Heap-based Buffer Overflow
CVE-2024-28935		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88281 - Use After Free
CVE-2024-29043		 CWE-416 High
No
No
 - 09.04.2024 SB2024040976
#VU88280 - Heap-based Buffer Overflow
CVE-2024-28941		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88279 - Out-of-bounds read
CVE-2024-28938		 CWE-125 High
No
No
 - 09.04.2024 SB2024040976
#VU88278 - Stack-based buffer overflow
CVE-2024-28934		 CWE-121 High
No
No
 - 09.04.2024 SB2024040976
#VU88254 - Improper input validation
CVE-2024-28909		 CWE-20 High
No
No
 - 09.04.2024 SB2024040964
#VU88253 - Improper input validation
CVE-2024-28912		 CWE-20 High
No
No
 - 09.04.2024 SB2024040964
#VU88252 - Improper input validation
CVE-2024-28915		 CWE-20 High
No
No
 - 09.04.2024 SB2024040964
#VU88251 - Improper input validation
CVE-2024-28913		 CWE-20 High
No
No
 - 09.04.2024 SB2024040964
#VU88250 - Improper input validation
CVE-2024-29044		 CWE-20 High
No
No
 - 09.04.2024 SB2024040964


Showing elements 1 - 20 out of 39