Microsoft SQL Server 2017 (CU 31) vulnerabilities
150 vulnerabilities
Known vulnerabilities in Microsoft SQL Server 2017 (CU 31), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-59499microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11
EPSS score1.18%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-55227microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.42%
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-47997microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score0.87%
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.CVE-2025-53727microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.16%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-24999microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.71%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-49758microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score0.97%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-49759microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.17%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-49719microsoftmicrosoft sql server 2016 for service pack 2 (gdr)+11EPSS score15.50%
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.CVE-2024-21335microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21308microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21303microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.49%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21398microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.85%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21425microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21317microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21373microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21333microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21449microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21428microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21415microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21414microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.85%
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability