Known vulnerabilities in Microsoft SQL Server - page 2

Vendor: Microsoft
Software: Microsoft SQL Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 180
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Microsoft SQL Server is affected by 180 known vulnerabilities: 4 critical, 127 high, 38 medium, 11 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113856 - Improper Access Control
CVE-2025-24999		 CWE-284 Medium
No
No
 - 12.08.2025 SB2025081271
#VU113855 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53727		 CWE-89 Medium
No
No
 - 12.08.2025 SB2025081271
#VU112568 - Use of Uninitialized Resource
CVE-2025-49718		 CWE-908 Medium
No
No
 15.0.2135.5 15.0.2135.5, 15.0.4435.7, 16.0.1140.6, 16.0.4200.1 16.0.4200.1 09.07.2025 SB2025070907
SB2025110342
#VU112566 - Improper input validation
CVE-2025-49719		 CWE-20 Medium
No
No
 13.0.6460.7 13.0.6460.7, 13.0.7055.9 13.0.7055.9, 14.0.2075.8 14.0.2075.8, 14.0.3495.9 14.0.3495.9, 15.0.2135.5 15.0.2135.5, 15.0.4435.7, 16.0.1140.6, 16.0.4200.1 16.0.4200.1 09.07.2025 SB2025070907
SB2025110342
#VU112564 - Heap-based Buffer Overflow
CVE-2025-49717		 CWE-122 Medium
No
No
 15.0.2135.5 15.0.2135.5, 15.0.4435.7, 16.0.1140.6, 16.0.4200.1 16.0.4200.1 09.07.2025 SB2025070907
#VU100369 - Untrusted Search Path
CVE-2024-49043		 CWE-426 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3, 16.0.1135.2 16.0.1135.2 12.11.2024 SB20241112136
#VU100310 - Use After Free
CVE-2024-49021		 CWE-416 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3, 16.0.1135.2 16.0.1135.2 12.11.2024 SB20241112114
#VU100301 - Heap-based Buffer Overflow
CVE-2024-49015		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100300 - Heap-based Buffer Overflow
CVE-2024-49009		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100299 - Heap-based Buffer Overflow
CVE-2024-49010		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100298 - Heap-based Buffer Overflow
CVE-2024-48999		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100297 - Heap-based Buffer Overflow
CVE-2024-48995		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100296 - Heap-based Buffer Overflow
CVE-2024-48996		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100295 - Heap-based Buffer Overflow
CVE-2024-49006		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100294 - Heap-based Buffer Overflow
CVE-2024-48998		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100293 - Heap-based Buffer Overflow
CVE-2024-49007		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100292 - Heap-based Buffer Overflow
CVE-2024-49017		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100291 - Heap-based Buffer Overflow
CVE-2024-49004		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100290 - Heap-based Buffer Overflow
CVE-2024-49001		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100272 - Heap-based Buffer Overflow
CVE-2024-48994		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110


Showing elements 21 - 40 out of 180