Known vulnerabilities in Microsoft SQL Server - page 9

Vendor: Microsoft
Software: Microsoft SQL Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 180
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Microsoft SQL Server is affected by 180 known vulnerabilities: 4 critical, 127 high, 38 medium, 11 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72224 - Improper input validation
CVE-2023-21718		 CWE-20 Medium
No
No
 2014 SP3 CU4 12.0.6444.4, 2014 SP3 GDR 12.0.6174.8, 2016 SP3 13.0.7024.30, 2016 SP3 GDR 13.0.6430.49, 2017 GDR 14.0.2047.8, 2017 CU31 14.0.3460.9, 2019 GDR 15.0.2101.7, 2019 CU18 15.0.4280.7, 2022 GDR 16.0.1050.5 15.02.2023 SB2023021426
SB2024041517
#VU72179 - Improper input validation
CVE-2023-21568		 CWE-20 Medium
No
No
 2014 SP3 CU4 12.0.6444.4, 2014 SP3 GDR 12.0.6174.8, 2016 SP3 13.0.7024.30, 2016 SP3 GDR 13.0.6430.49, 2017 GDR 14.0.2047.8, 2017 CU31 14.0.3460.9, 2019 GDR 15.0.2101.7, 2019 CU18 15.0.4280.7, 2022 GDR 16.0.1050.5 14.02.2023 SB2023021426
SB2024041517
#VU72178 - Improper input validation
CVE-2023-21705		 CWE-20 High
No
No
 2014 SP3 CU4 12.0.6444.4, 2014 SP3 GDR 12.0.6174.8, 2016 SP3 13.0.7024.30, 2016 SP3 GDR 13.0.6430.49, 2017 GDR 14.0.2047.8, 2017 CU31 14.0.3460.9, 2019 GDR 15.0.2101.7, 2019 CU18 15.0.4280.7, 2022 GDR 16.0.1050.5 14.02.2023 SB2023021426
SB2024041517
#VU72177 - Improper input validation
CVE-2023-21528		 CWE-20 High
No
No
 2014 SP3 CU4 12.0.6444.4, 2014 SP3 GDR 12.0.6174.8, 2016 SP3 13.0.7024.30, 2016 SP3 GDR 13.0.6430.49, 2017 GDR 14.0.2047.8, 2017 CU31 14.0.3460.9, 2019 GDR 15.0.2101.7, 2019 CU18 15.0.4280.7, 2022 GDR 16.0.1050.5 14.02.2023 SB2023021426
SB2024041517
#VU72176 - Improper input validation
CVE-2023-21713		 CWE-20 High
No
No
 2014 SP3 CU4 12.0.6444.4, 2014 SP3 GDR 12.0.6174.8, 2016 SP3 13.0.7024.30, 2016 SP3 GDR 13.0.6430.49, 2017 GDR 14.0.2047.8, 2017 CU31 14.0.3460.9, 2019 GDR 15.0.2101.7, 2019 CU18 15.0.4280.7, 2022 GDR 16.0.1050.5 14.02.2023 SB2023021426
SB2024041517
#VU64363 - Improper input validation
CVE-2022-29143		 CWE-20 Medium
No
No
 - 14.06.2022 SB2022061453
#VU60425 - Permissions, Privileges, and Access Controls
CVE-2022-23276		 CWE-264 Low
No
No
 - 08.02.2022 SB2022020845
#VU49489 - Improper input validation
CVE-2021-1636		 CWE-20 Medium
No
No
 - 12.01.2021 SB2021011280
#VU25231 - Improper input validation
CVE-2020-0618		 CWE-20 Medium
Available
Exploited
 - 11.02.2020 SB2020021150
#VU19097 - Memory corruption
CVE-2019-1068		 CWE-119 Medium
No
No
 - 10.07.2019 SB2019071009
#VU14383 - Memory corruption
CVE-2018-8273		 CWE-119 Medium
No
No
 - 14.08.2018 SB2018081421
#VU7743 - Permissions, Privileges, and Access Controls
CVE-2017-8516		 CWE-264 Low
No
No
 - 08.08.2017 SB2017080812
#VU3883 - Stack-based buffer overflow
CVE-2012-0158		 CWE-121 Critical
Available
Exploited
 - 10.01.2017 SB2012041002
#VU3043 - Memory corruption
CVE-2012-1856		 CWE-119 Critical
No
Exploited
 - 29.12.2016 SB2012081402
#VU1388 - Integer overflow
CVE-2009-3126		 CWE-190 Critical
No
No
 - 19.12.2016 SB2009101301
#VU1387 - Memory corruption
CVE-2009-2504		 CWE-119 High
No
No
 - 19.12.2016 SB2009101301
#VU1386 - Memory corruption
CVE-2009-2503		 CWE-119 High
No
No
 - 19.12.2016 SB2009101301
#VU1385 - Memory corruption
CVE-2009-2502		 CWE-119 High
No
No
 - 19.12.2016 SB2009101301
#VU1384 - Heap-based Buffer Overflow
CVE-2009-2501		 CWE-122 Critical
No
No
 - 19.12.2016 SB2009101301
#VU1383 - Integer overflow
CVE-2009-2500		 CWE-190 High
No
No
 - 19.12.2016 SB2009101301


Showing elements 161 - 180 out of 180