CVE-20XX-?
agent?

Microsoft Sql Server 2017 CVEs.

Published CVEs affecting Microsoft Sql Server 2017, ranked by exploit odds.

3 CVEs · updated 2026-11-06 16:36 UTC

Reset all
  1. CVE-2026-66819

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Injection Server Microsoft Sql Server 2017

    8.8 HIGH 1.0% exploit odds Fix listed
  2. CVE-2026-66820

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Injection Server Microsoft Sql Server 2017

    8.8 HIGH 1.0% exploit odds Fix listed
  3. CVE-2026-67370

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Injection Server Microsoft Sql Server 2017

    8.8 HIGH 1.0% exploit odds Fix listed

All CVEs affecting Microsoft Sql Server 2017 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.