Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2017, Microsoft SQL Server 2019 und Microsoft SQL Server 2022 ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte (SQL sysadmin, SYSTEM), zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.
Product
Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.
Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.
Vulnerabilities 54
-
Critical 9.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.8
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.7
JDBC Driver for SQL Server Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.1
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
High 8.1
Microsoft SQL Server Elevation of Privilege Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.5
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.5
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.5
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.4
Microsoft.Data.SqlClient Information Disclosure Vulnerability
Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.
-
High 7.2
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.2
Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.2
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 5.9
Microsoft SQL Server Information Disclosure Vulnerability
Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network.
-
Medium 5.7
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 4.9
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-67632
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67632
-
Microsoft Security Advisory CVE-2026-66813
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66813
-
Microsoft Security Advisory CVE-2026-67374
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67374
-
Microsoft Security Advisory CVE-2026-67382
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67382
-
Microsoft Security Advisory CVE-2026-67387
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67387
-
Microsoft Security Advisory CVE-2026-67391
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67391
-
Microsoft Security Advisory CVE-2026-67637
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67637
-
Microsoft Security Advisory CVE-2026-84010
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84010
-
Microsoft Security Advisory CVE-2026-94511
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94511
-
Microsoft Security Advisory CVE-2026-116946
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116946
-
Microsoft Security Advisory CVE-2026-118120
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118120
-
Microsoft Security Advisory CVE-2026-118119
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118119
-
Microsoft Security Advisory CVE-2026-118118
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118118
-
Microsoft Security Advisory CVE-2026-116929
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116929
-
Microsoft Security Advisory CVE-2026-116930
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116930
-
Microsoft Security Advisory CVE-2026-116947
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116947
-
Microsoft Security Advisory CVE-2026-116931
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116931
-
Microsoft Security Advisory CVE-2026-116936
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116936
-
Microsoft Security Advisory CVE-2026-116939
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116939
-
Microsoft Security Advisory CVE-2026-116940
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116940
-
Microsoft Security Advisory CVE-2026-116941
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116941
-
Microsoft Security Advisory CVE-2026-116943
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116943
-
Microsoft Security Advisory CVE-2026-116944
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116944
-
Microsoft Security Advisory CVE-2026-116945
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116945
-
Microsoft Security Advisory CVE-2026-116932
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116932
-
Microsoft Security Advisory CVE-2026-118117
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118117
-
Microsoft Security Advisory CVE-2026-118116
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118116
-
Microsoft Security Advisory CVE-2026-118115
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118115
-
Microsoft Security Advisory CVE-2026-118114
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118114
-
Microsoft Security Advisory CVE-2026-118113
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118113
-
Microsoft Security Advisory CVE-2026-118112
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118112
-
Microsoft Security Advisory CVE-2026-118111
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118111
-
Microsoft Security Advisory CVE-2026-118110
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118110
-
Microsoft Security Advisory CVE-2026-118109
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118109
-
Microsoft Security Advisory CVE-2026-118108
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118108
-
Microsoft Security Advisory CVE-2026-118106
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118106
-
Microsoft Security Advisory CVE-2026-118104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118104
-
Microsoft Security Advisory CVE-2026-118103
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118103
-
Microsoft Security Advisory CVE-2026-118102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118102
-
Microsoft Security Advisory CVE-2026-118105
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118105
-
Microsoft Security Advisory CVE-2026-116942
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116942
-
Microsoft Security Advisory CVE-2026-116934
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116934
-
Microsoft Security Advisory CVE-2026-116935
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116935
-
Microsoft Security Advisory CVE-2026-116937
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116937
-
Microsoft Security Advisory CVE-2026-116938
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116938
-
Microsoft Security Advisory CVE-2026-94513
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94513
-
Microsoft Security Advisory CVE-2026-116933
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116933
-
Microsoft Security Advisory CVE-2026-68783
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68783
-
Microsoft Security Advisory CVE-2026-67646
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67646
-
Microsoft Security Advisory CVE-2026-67372
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67372
-
Microsoft Security Advisory CVE-2026-67375
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375
-
Microsoft Security Advisory CVE-2026-70003
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70003
-
Microsoft Security Advisory CVE-2026-88111
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88111
-
Microsoft Security Advisory CVE-2026-62903
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62903