CVE-20XX-?

Microsoft Sql Server 2019 CVEs.

Published CVEs affecting Microsoft Sql Server 2019, ranked by exploit odds.

8 CVEs · updated 2026-11-06 05:04 UTC

Reset all
  1. CVE-2025-49717

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2019

    8.5 HIGH 1% exploit odds Fix listed
  2. CVE-2026-67624

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Memory safety Server Microsoft Sql Server 2019

    6.5 MEDIUM 1.0% exploit odds Fix listed
  3. CVE-2026-67636

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2019

    9.0 CRITICAL 0.7% exploit odds Fix listed
  4. CVE-2026-67379

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Memory safety Server Microsoft Sql Server 2019

    8.5 HIGH 0.7% exploit odds Fix listed
  5. CVE-2026-85919

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed
  6. CVE-2026-88082

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed
  7. CVE-2026-88088

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed
  8. CVE-2026-85876

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

    Memory safety Server Microsoft Sql Server 2019

    7.0 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Microsoft Sql Server 2019 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.