CVE-20XX-?
agent?

Microsoft Sql Server 2017 CVEs.

Published CVEs affecting Microsoft Sql Server 2017, ranked by exploit odds.

8 CVEs · updated 2026-11-10 14:01 UTC

Reset all
  1. CVE-2026-94512

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.8 HIGH 0.7% exploit odds Fix listed
  2. CVE-2026-96956

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.0 HIGH 0.6% exploit odds Fix listed
  3. CVE-2026-67625

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.5 HIGH 0.6% exploit odds Fix listed
  4. CVE-2026-68883

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.5 HIGH 0.6% exploit odds Fix listed
  5. CVE-2026-85886

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2017

    8.5 HIGH 0.4% exploit odds Fix listed
  6. CVE-2026-70189

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

    Memory safety Server Microsoft Sql Server 2017

    6.7 MEDIUM 0.3% exploit odds Fix listed
  7. CVE-2026-88089

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

    Memory safety Server Microsoft Sql Server 2017

    6.7 MEDIUM 0.3% exploit odds Fix listed
  8. CVE-2026-88085

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2017

    6.4 MEDIUM 0.2% exploit odds Fix listed

All CVEs affecting Microsoft Sql Server 2017 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.