Known vulnerabilities in Microsoft SQL Server - page 8

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 180
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Microsoft SQL Server is affected by 180 known vulnerabilities: 4 critical, 127 high, 38 medium, 11 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88254 - Improper input validation
CVE-2024-28909
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88253 - Improper input validation
CVE-2024-28912
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88252 - Improper input validation
CVE-2024-28915
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88251 - Improper input validation
CVE-2024-28913
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88250 - Improper input validation
CVE-2024-29044
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU85244 - Security Features
CVE-2024-0056
CWE-254 High
No
No
- 10.01.2024 SB2024011005
SB2024011058
SB2024011059
and 10 more
#VU81827 - Improper input validation
CVE-2023-36728
CWE-20 Low
No
No
2014 SP3 CU4 12.0.6449.1, 2014 SP3 GDR 12.0.6179.1, 2016 SP3 13.0.7029.3, 2016 SP3 GDR 13.0.6435.1, 2017 GDR 14.0.2052.1, 2017 CU31 14.0.3465.1, 2019 GDR 15.0.2104.1, 2019 CU22 15.0.4326.1, 2022 GDR 16.0.1105.1, 2022 CU8 16.0.4080.1 10.10.2023 SB2023101090
SB2024041517
#VU81824 - Improper input validation
CVE-2023-36417
CWE-20 High
No
No
2019 GDR 15.0.2104.1, 2019 CU22 15.0.4326.1, 2022 GDR 16.0.1105.1, 2022 CU8 16.0.4080.1 10.10.2023 SB2023101088
SB2024041517
#VU81802 - Improper input validation
CVE-2023-36785
CWE-20 High
No
No
2019 GDR 15.0.2104.1, 2019 CU22 15.0.4326.1, 2022 GDR 16.0.1105.1, 2022 CU8 16.0.4080.1 10.10.2023 SB2023101083
SB2024041517
SB2025012461
#VU81801 - Improper input validation
CVE-2023-36730
CWE-20 High
No
No
2019 GDR 15.0.2104.1, 2019 CU22 15.0.4326.1, 2022 GDR 16.0.1105.1, 2022 CU8 16.0.4080.1 10.10.2023 SB2023101083
SB2024041517
#VU81798 - Improper input validation
CVE-2023-36420
CWE-20 Medium
No
No
2019 GDR 15.0.2104.1, 2019 CU22 15.0.4326.1, 2022 GDR 16.0.1105.1, 2022 CU8 16.0.4080.1 10.10.2023 SB2023101083
SB2024041517
#VU79153 - Improper input validation
CVE-2023-38169
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 CU5 16.0.4045.3 08.08.2023 SB2023080869
SB2024041517
#VU77449 - Improper input validation
CVE-2023-29349
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 16.0.4053.3 15.06.2023 SB2023061536
SB2024041517
#VU77448 - Improper input validation
CVE-2023-32028
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 16.0.4053.3 15.06.2023 SB2023061535
SB2024041517
#VU77447 - Improper input validation
CVE-2023-29356
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 16.0.4053.3 15.06.2023 SB2023061534
SB2024041517
#VU77446 - Improper input validation
CVE-2023-32027
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 16.0.4053.3 15.06.2023 SB2023061534
SB2024041517
#VU77445 - Improper input validation
CVE-2023-32026
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 16.0.4053.3 15.06.2023 SB2023061534
SB2024041517
#VU77444 - Improper input validation
CVE-2023-32025
CWE-20 High
No
No
2019 CU21 15.0.4316.3, 2022 16.0.4053.3 15.06.2023 SB2023061534
SB2024041517
#VU74884 - Out-of-bounds write
CVE-2023-23384
CWE-787 High
No
No
- 11.04.2023 SB2023041160
SB2024041517
#VU72180 - Improper input validation
CVE-2023-21704
CWE-20 High
No
No
2014 SP3 CU4 12.0.6444.4, 2014 SP3 GDR 12.0.6174.8, 2016 SP3 13.0.7024.30, 2016 SP3 GDR 13.0.6430.49, 2017 GDR 14.0.2047.8, 2017 CU31 14.0.3460.9, 2019 GDR 15.0.2101.7, 2019 CU18 15.0.4280.7, 2022 GDR 16.0.1050.5 14.02.2023 SB2023021426
SB2024041517


Showing elements 141 - 160 out of 180