Aller au contenu

Vulnérabilités de Microsoft Microsoft SQL Server 2017 (GDR)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-94512 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-94520 Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network 4.9 Moyenne 13 oct. 2026
CVE-2026-88085 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally 6.4 Moyenne 13 oct. 2026
CVE-2026-88089 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally 6.7 Moyenne 13 oct. 2026
CVE-2026-85888 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 7.7 Élevée 13 oct. 2026
CVE-2026-88081 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 7.7 Élevée 13 oct. 2026
CVE-2026-67628 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 4.9 Moyenne 13 oct. 2026
CVE-2026-68883 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network 8.5 Élevée 13 oct. 2026
CVE-2026-70189 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally 6.7 Moyenne 13 oct. 2026
CVE-2026-85886 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.5 Élevée 13 oct. 2026
CVE-2026-67625 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.5 Élevée 13 oct. 2026
CVE-2026-96956 Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network 8.0 Élevée 13 oct. 2026
CVE-2026-67645 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-77481 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-66819 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an… 8.8 Élevée 8 sept. 2026
CVE-2026-78441 Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-78442 Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-69562 Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-77488 Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally 5.5 Moyenne 8 sept. 2026
CVE-2026-77486 Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-77485 Use after free in SQL Server allows an authorized attacker to elevate privileges locally 7.0 Élevée 8 sept. 2026
CVE-2026-77487 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 8 sept. 2026
CVE-2026-77483 Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 8 sept. 2026
CVE-2026-77480 Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a… 8.8 Élevée 8 sept. 2026
CVE-2026-73028 Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network 8.8 Élevée 8 sept. 2026

Autres produits Microsoft