Known vulnerabilities in Microsoft SQL Server - page 4

Vendor: Microsoft
Software: Microsoft SQL Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 180
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Microsoft SQL Server is affected by 180 known vulnerabilities: 4 critical, 127 high, 38 medium, 11 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97047 - Use After Free
CVE-2024-26186		 CWE-416 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97046 - Heap-based Buffer Overflow
CVE-2024-26191		 CWE-122 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97045 - Heap-based Buffer Overflow
CVE-2024-37335		 CWE-122 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97044 - Untrusted Pointer Dereference
CVE-2024-37339		 CWE-822 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97043 - Out-of-bounds read
CVE-2024-37338		 CWE-125 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97041 - Improper Privilege Management
CVE-2024-37980		 CWE-269 Medium
No
No
 13.0.6445.1 13.0.6445.1, 13.0.7040.1 13.0.7040.1, 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910111
#VU97040 - Improper input validation
CVE-2024-37965		 CWE-20 Medium
No
No
 13.0.6445.1 13.0.6445.1, 13.0.7040.1 13.0.7040.1, 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910111
#VU97039 - Improper Access Control
CVE-2024-37341		 CWE-284 Medium
No
No
 13.0.6445.1 13.0.6445.1, 13.0.7040.1 13.0.7040.1, 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910111
#VU97038 - Improper Null Termination
CVE-2024-43474		 CWE-170 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1 10.09.2024 SB20240910111
#VU93999 - Heap-based Buffer Overflow
CVE-2024-37334		 CWE-122 High
No
No
 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709106
#VU93996 - Use After Free
CVE-2024-21332		 CWE-416 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93995 - Double Free
CVE-2024-38087		 CWE-415 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93994 - Heap-based Buffer Overflow
CVE-2024-21414		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93993 - Heap-based Buffer Overflow
CVE-2024-37326		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93992 - Heap-based Buffer Overflow
CVE-2024-37318		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93991 - Heap-based Buffer Overflow
CVE-2024-37332		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93990 - Heap-based Buffer Overflow
CVE-2024-37324		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93989 - Heap-based Buffer Overflow
CVE-2024-21333		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93988 - Heap-based Buffer Overflow
CVE-2024-37327		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103
#VU93960 - Heap-based Buffer Overflow
CVE-2024-21449		 CWE-122 High
No
No
 2016 SP3 13.0.6441.1, 2016 SP3 13.0.7037.1, 2017 CU31 14.0.3471.2, 2017 14.0.2056.2, 2019 CU27 15.0.4382.1, 2019 15.0.2116.2, 2022 CU13 16.0.4131.2, 2022 16.0.1121.4 09.07.2024 SB20240709103


Showing elements 61 - 80 out of 180