CVE-20XX-?

Microsoft Sql Server 2019 CVEs.

Published CVEs affecting Microsoft Sql Server 2019, ranked by exploit odds.

14 CVEs · updated 2026-11-06 01:19 UTC

  1. CVE-2025-49718

    Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.

    Microsoft Sql Server 2019

    7.5 HIGH 4% exploit odds Fix listed
  2. CVE-2026-77484

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

    Code execution Server Microsoft Sql Server 2019

    8.8 HIGH 2% exploit odds Fix listed
  3. CVE-2026-65674

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

    Code execution Server Microsoft Sql Server 2019

    8.8 HIGH 2% exploit odds Fix listed
  4. CVE-2025-49717

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Microsoft Sql Server 2019

    8.5 HIGH 1% exploit odds Fix listed
  5. CVE-2026-47297

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

    Code execution Server Microsoft Sql Server 2019

    8.1 HIGH 1% exploit odds Fix listed
  6. CVE-2026-67624

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2019

    6.5 MEDIUM 1.0% exploit odds Fix listed
  7. CVE-2026-73029

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

    Other Server Microsoft Sql Server 2019

    6.5 MEDIUM 1.0% exploit odds Fix listed
  8. CVE-2026-67378

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

    Other Server Microsoft Sql Server 2019

    9.0 CRITICAL 0.7% exploit odds Fix listed
  9. CVE-2026-67636

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2019

    9.0 CRITICAL 0.7% exploit odds Fix listed
  10. CVE-2026-67379

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2019

    8.5 HIGH 0.7% exploit odds Fix listed
  11. CVE-2026-85919

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed
  12. CVE-2026-88082

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed
  13. CVE-2026-88088

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed
  14. CVE-2026-85876

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Microsoft Sql Server 2019 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.