CVE-20XX-?

Microsoft Sql Server 2017 CVEs.

Published CVEs affecting Microsoft Sql Server 2017, ranked by exploit odds.

53 CVEs · updated 2026-11-06 06:52 UTC

  1. CVE-2026-67376

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

    Memory safety Server Microsoft Sql Server 2017

    7.5 HIGH 1% exploit odds Fix listed
  2. CVE-2026-67633

    Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1% exploit odds Fix listed
  3. CVE-2026-68785

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    4.9 MEDIUM 1% exploit odds Fix listed
  4. CVE-2026-67368

    Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Other Server Microsoft Sql Server 2017

    8.8 HIGH 1% exploit odds Fix listed
  5. CVE-2026-67386

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

    Other Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  6. CVE-2026-67390

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

    Other Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  7. CVE-2026-67393

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

    Other Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  8. CVE-2026-67629

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  9. CVE-2026-67630

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  10. CVE-2026-67645

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  11. CVE-2026-67648

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

    Other Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  12. CVE-2026-68776

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

    Other Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  13. CVE-2026-68777

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  14. CVE-2026-68778

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  15. CVE-2026-68779

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  16. CVE-2026-68780

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  17. CVE-2026-68781

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  18. CVE-2026-68784

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 1.0% exploit odds Fix listed
  19. CVE-2026-66819

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Injection Server Microsoft Sql Server 2017

    8.8 HIGH 1.0% exploit odds Fix listed
  20. CVE-2026-66820

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Injection Server Microsoft Sql Server 2017

    8.8 HIGH 1.0% exploit odds Fix listed
  21. CVE-2026-67370

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Injection Server Microsoft Sql Server 2017

    8.8 HIGH 1.0% exploit odds Fix listed
  22. CVE-2026-67631

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    9.8 CRITICAL 1.0% exploit odds Fix listed
  23. CVE-2026-69562

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2017

    6.5 MEDIUM 0.9% exploit odds Fix listed
  24. CVE-2026-78441

    Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Sql Server 2017

    6.5 MEDIUM 0.9% exploit odds Fix listed
  25. CVE-2026-67380

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  26. CVE-2026-67381

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  27. CVE-2026-67384

    Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  28. CVE-2026-67385

    Use after free in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  29. CVE-2026-67388

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  30. CVE-2026-67639

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  31. CVE-2026-68775

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  32. CVE-2026-68786

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  33. CVE-2026-77481

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.9% exploit odds Fix listed
  34. CVE-2026-77482

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  35. CVE-2026-77486

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  36. CVE-2026-78442

    Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  37. CVE-2026-66814

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Other Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  38. CVE-2026-66818

    Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

    Auth & access Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  39. CVE-2026-73028

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Auth & access Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  40. CVE-2026-77480

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Other Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  41. CVE-2026-77483

    Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

    Other Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  42. CVE-2026-77487

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Auth & access Server Microsoft Sql Server 2017

    8.8 HIGH 0.8% exploit odds Fix listed
  43. CVE-2026-94512

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.7% exploit odds Fix listed
  44. CVE-2026-96956

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.0 HIGH 0.6% exploit odds Fix listed
  45. CVE-2026-67625

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.5 HIGH 0.6% exploit odds Fix listed
  46. CVE-2026-68883

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.5 HIGH 0.6% exploit odds Fix listed
  47. CVE-2026-85886

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.5 HIGH 0.4% exploit odds Fix listed
  48. CVE-2026-77488

    Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

    Other Server Microsoft Sql Server 2017

    5.5 MEDIUM 0.4% exploit odds Fix listed
  49. CVE-2026-68787

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

    Memory safety Server Microsoft Sql Server 2017

    7.8 HIGH 0.3% exploit odds Fix listed
  50. CVE-2026-70189

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

    Memory safety Server Microsoft Sql Server 2017

    6.7 MEDIUM 0.3% exploit odds Fix listed

All CVEs affecting Microsoft Sql Server 2017 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.