Known vulnerabilities in Microsoft SQL Server Management Studio

Vendor: Microsoft
Software: Microsoft SQL Server Management Studio
Software CPE: cpe:2.3:a:microsoft:sql_server_management_studio:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Management Studio Microsoft SQL Server Management Studio is affected by 8 known vulnerabilities: 1 high, 2 medium, 5 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148450 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-65669		 CWE-74 High
No
No
 22.8.2 09.09.2026 SB2026090939
#VU107291 - Uncontrolled Search Path Element
CVE-2025-29803		 CWE-427 Medium
No
No
 - 09.04.2025 SB2025040959
#VU45629 - Improper input validation
CVE-2020-1455		 CWE-20 Medium
No
No
 - 12.08.2020 SB2020081243
#VU21659 - Exposure of sensitive information to an unauthorized actor
CVE-2019-1313		 CWE-200 Low
No
No
 18.3.1 09.10.2019 SB2019100913
#VU21658 - Incorrect Default Permissions
CVE-2019-1376		 CWE-276 Low
No
No
 18.3.1 09.10.2019 SB2019100913
#VU15263 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-8533		 CWE-611 Low
Available
No
 - 09.10.2018 SB2018100929
#VU15262 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-8532		 CWE-611 Low
Available
No
 - 09.10.2018 SB2018100929
#VU14918 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-8527		 CWE-611 Low
Available
No
 - 27.09.2018 SB2018092402