Aller au contenu

Vulnérabilités de Microsoft Microsoft SQL Server 2017 (CU 31)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-67386 Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-67380 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-67381 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 8 sept. 2026
CVE-2026-66820 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 8 sept. 2026
CVE-2026-66818 Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 8 sept. 2026
CVE-2026-66814 Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a… 8.8 Élevée 8 sept. 2026
CVE-2026-68786 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-67384 Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-67376 Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network 7.5 Élevée 8 sept. 2026
CVE-2026-68787 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally 7.8 Élevée 8 sept. 2026
CVE-2026-68785 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 4.9 Moyenne 8 sept. 2026
CVE-2026-68784 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-67633 Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-68781 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-67630 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-67631 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network 9.8 Critique 8 sept. 2026
CVE-2026-67629 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-67370 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 8 sept. 2026
CVE-2026-67368 Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate… 8.8 Élevée 8 sept. 2026
CVE-2026-77482 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-47295 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 14 juil. 2026
CVE-2026-55002 External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 14 juil. 2026
CVE-2026-54118 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network 9.8 Critique 14 juil. 2026
CVE-2026-47296 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 7.5 Élevée 14 juil. 2026
CVE-2026-40370 External control of file name or path in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 12 mai 2026

Autres produits Microsoft