Known vulnerabilities in Microsoft SQL Server - page 3

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 242
Public exploits: 2
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Microsoft SQL Server is affected by 242 known vulnerabilities: 4 critical, 131 high, 70 medium, 37 low Critical High Medium Low

Vulnerabilities (242)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148421 - Heap-based Buffer Overflow
CVE-2026-78456
CWE-122 Medium
No
No
16.0.1200.5, 16.0.4275.2 09.09.2026 SB2026090917
#VU148420 - Integer underflow
CVE-2026-77488
CWE-191 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148419 - Improper Access Control
CVE-2026-77487
CWE-284 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148418 - Integer overflow
CVE-2026-77486
CWE-190 High
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9 09.09.2026 SB2026090917
#VU148417 - Use After Free
CVE-2026-77485
CWE-416 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148416 - Deserialization of Untrusted Data
CVE-2026-77484
CWE-502 Medium
No
No
15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148415 - Weak Authentication
CVE-2026-77483
CWE-1390 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148414 - Heap-based Buffer Overflow
CVE-2026-77482
CWE-122 High
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9 09.09.2026 SB2026090917
#VU148413 - Heap-based Buffer Overflow
CVE-2026-77481
CWE-122 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148412 - Insufficient Granularity of Access Control
CVE-2026-77480
CWE-1220 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148411 - Buffer over-read
CVE-2026-73029
CWE-126 Low
No
No
15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148410 - Improper Access Control
CVE-2026-73028
CWE-284 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148409 - Out-of-bounds read
CVE-2026-69562
CWE-125 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9 09.09.2026 SB2026090917
#VU148408 - Heap-based Buffer Overflow
CVE-2026-68787
CWE-122 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148407 - Heap-based Buffer Overflow
CVE-2026-68786
CWE-122 Medium
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148406 - Heap-based Buffer Overflow
CVE-2026-68785
CWE-122 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148405 - Out-of-bounds read
CVE-2026-68784
CWE-125 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148404 - Out-of-bounds read
CVE-2026-68781
CWE-125 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148403 - Out-of-bounds read
CVE-2026-68780
CWE-125 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917
#VU148402 - Out-of-bounds read
CVE-2026-68779
CWE-125 Low
No
No
14.0.2130.4, 14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 16.0.1200.5, 16.0.4275.2, 17.0.1135.8, 17.0.4085.5 09.09.2026 SB2026090917


Showing elements 41 - 60 out of 242