Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2017, SQL Server 2019 und SQL Server 2022 ausnutzen, um seine Berechtigungen zu erweitern – unter anderem auf SQL-Sysadmin- oder SYSTEM-Rechte –, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Sicherheitsmaßnahmen zu umgehen.
Product
Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.
Vulnerabilities 62
-
Critical 9.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.0
Microsoft SQL Server Remote Code Execution Vulnerability
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.0
Microsoft SQL Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Use after free in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
SQL Server Elevation of Privilege Vulnerability
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Windows OLE DB Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
-
High 8.8
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.5
Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.1
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
-
High 7.5
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
-
High 7.0
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Microsoft SQL Server Security Feature Bypass Vulnerability
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Denial of Service Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
-
Medium 6.5
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Windows OLE DB Information Disclosure Vulnerability
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
-
Medium 4.9
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-66819
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66819
-
Microsoft Security Advisory CVE-2026-68780
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68780
-
Microsoft Security Advisory CVE-2026-67368
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67368
-
Microsoft Security Advisory CVE-2026-67376
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67376
-
Microsoft Security Advisory CVE-2026-67370
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67370
-
Microsoft Security Advisory CVE-2026-67648
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67648
-
Microsoft Security Advisory CVE-2026-68775
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68775
-
Microsoft Security Advisory CVE-2026-68777
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68777
-
Microsoft Security Advisory CVE-2026-68778
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68778
-
Microsoft Security Advisory CVE-2026-66820
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66820
-
Microsoft Security Advisory CVE-2026-68781
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68781
-
Microsoft Security Advisory CVE-2026-66814
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66814
-
Microsoft Security Advisory CVE-2026-66818
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66818
-
Microsoft Security Advisory CVE-2026-68776
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68776
-
Microsoft Security Advisory CVE-2026-68779
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68779
-
Microsoft Security Advisory CVE-2026-67388
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67388
-
Microsoft Security Advisory CVE-2026-67639
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67639
-
Microsoft Security Advisory CVE-2026-67380
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67380
-
Microsoft Security Advisory CVE-2026-67381
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67381
-
Microsoft Security Advisory CVE-2026-67384
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67384
-
Microsoft Security Advisory CVE-2026-67385
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67385
-
Microsoft Security Advisory CVE-2026-67386
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67386
-
Microsoft Security Advisory CVE-2026-67390
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67390
-
Microsoft Security Advisory CVE-2026-67393
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67393
-
Microsoft Security Advisory CVE-2026-67629
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67629
-
Microsoft Security Advisory CVE-2026-67630
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67630
-
Microsoft Security Advisory CVE-2026-67631
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67631
-
Microsoft Security Advisory CVE-2026-67633
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67633
-
Microsoft Security Advisory CVE-2026-67645
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67645
-
Microsoft Security Advisory CVE-2026-77481
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481
-
Microsoft Security Advisory CVE-2026-78441
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441
-
Microsoft Security Advisory CVE-2026-78442
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442
-
Microsoft Security Advisory CVE-2026-68785
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68785
-
Microsoft Security Advisory CVE-2026-68786
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68786
-
Microsoft Security Advisory CVE-2026-68787
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68787
-
Microsoft Security Advisory CVE-2026-69562
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69562
-
Microsoft Security Advisory CVE-2026-73028
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028
-
Microsoft Security Advisory CVE-2026-77480
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480
-
Microsoft Security Advisory CVE-2026-77488
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488
-
Microsoft Security Advisory CVE-2026-77483
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483
-
Microsoft Security Advisory CVE-2026-77485
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485
-
Microsoft Security Advisory CVE-2026-77486
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486
-
Microsoft Security Advisory CVE-2026-77487
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487
-
Microsoft Security Advisory CVE-2026-77482
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482
-
Microsoft Security Advisory CVE-2026-68784
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68784
-
Microsoft Security Advisory CVE-2026-77484
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484
-
Microsoft Security Advisory CVE-2026-73029
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029
-
Microsoft Security Advisory CVE-2026-47297
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47297
-
Microsoft Security Advisory CVE-2026-67378
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67378
-
Microsoft Security Advisory CVE-2026-67636
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67636
-
Microsoft Security Advisory CVE-2026-67624
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67624
-
Microsoft Security Advisory CVE-2026-67379
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67379
-
Microsoft Security Advisory CVE-2026-78456
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456
-
Microsoft Security Advisory CVE-2026-66816
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66816
-
Microsoft Security Advisory CVE-2026-67389
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67389
-
Microsoft Security Advisory CVE-2026-67641
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67641
-
Microsoft Security Advisory CVE-2026-67643
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67643
-
Microsoft Security Advisory CVE-2026-67373
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67373
-
Microsoft Security Advisory CVE-2026-67369
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67369
-
Microsoft Security Advisory CVE-2026-67383
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67383
-
Microsoft Security Advisory CVE-2026-67642
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67642
-
Microsoft Security Advisory CVE-2026-67638
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67638