Microsoft Sql Server 2017 CVEs.
Published CVEs affecting Microsoft Sql Server 2017, ranked by exploit odds.
-
CVE-2026-67376
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
-
CVE-2026-67633
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
-
CVE-2026-68785
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-67629
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-67630
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-67645
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-68777
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-68778
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-68779
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-68780
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-68781
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-68784
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-67631
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-69562
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-78441
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-67380
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-67381
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-67384
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-67385
Use after free in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-67388
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-67639
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-68775
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-68786
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-77481
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-77482
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-77486
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-78442
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
-
CVE-2026-94512
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-96956
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-67625
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-68883
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-85886
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
CVE-2026-68787
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
-
CVE-2026-70189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
-
CVE-2026-88089
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
-
CVE-2026-77485
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
All CVEs affecting Microsoft Sql Server 2017 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.