Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2017, Microsoft SQL Server 2019 und Microsoft SQL Server 2022 ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Angriff durchzuführen.
Product
Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.
Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.
Vulnerabilities 22
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.5
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.5
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.0
SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.7
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
High 7.7
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
High 7.5
Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
-
Medium 6.7
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
-
Medium 6.7
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
-
Medium 6.6
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
Medium 6.5
Microsoft SQL Server Denial of Service Vulnerability
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
-
Medium 6.4
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Microsoft SQL Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.
-
Medium 5.3
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
-
Medium 4.9
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 4.9
Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-100708
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-88085
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085
-
Microsoft Security Advisory CVE-2026-67628
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628
-
Microsoft Security Advisory CVE-2026-88081
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081
-
Microsoft Security Advisory CVE-2026-85888
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888
-
Microsoft Security Advisory CVE-2026-85886
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85886
-
Microsoft Security Advisory CVE-2026-70189
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70189
-
Microsoft Security Advisory CVE-2026-68883
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68883
-
Microsoft Security Advisory CVE-2026-67625
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67625
-
Microsoft Security Advisory CVE-2026-88089
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089
-
Microsoft Security Advisory CVE-2026-94512
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512
-
Microsoft Security Advisory CVE-2026-96956
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96956
-
Microsoft Security Advisory CVE-2026-94520
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520
-
Microsoft Security Advisory CVE-2026-65674
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65674
-
Microsoft Security Advisory CVE-2026-85876
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876
-
Microsoft Security Advisory CVE-2026-85919
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919
-
Microsoft Security Advisory CVE-2026-88084
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88084
-
Microsoft Security Advisory CVE-2026-88082
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082
-
Microsoft Security Advisory CVE-2026-88086
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086
-
Microsoft Security Advisory CVE-2026-88088
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088
-
Microsoft Security Advisory CVE-2026-67626
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67626
-
Microsoft Security Advisory CVE-2026-83945
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83945
-
Microsoft Security Advisory CVE-2026-88083
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083