Product · Microsoft

Microsoft SQL Server 2025 (CU8)

56 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.8

CVE-2026-67643

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Microsoft Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2025 for x64-based Systems (GDR) Microsoft SQL Server 2025 (CU8)

Sep 8, 2026
Critical 9.0

CVE-2026-67636

Microsoft SQL Server Remote Code Execution Vulnerability

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2025 for x64-based Systems (GDR)

Sep 8, 2026
Critical 9.0

CVE-2026-67378

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2025 for x64-based Systems (GDR)

Sep 8, 2026
Critical 9.8

CVE-2026-67631

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2017 (GDR)

Sep 8, 2026