Microsoft SQL Server 2017 (CU 31) vulnerabilities, page 5
150 vulnerabilities
Known vulnerabilities in Microsoft SQL Server 2017 (CU 31), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-49009microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+8
EPSS score1.38%
SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49003microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+8EPSS score1.47%
SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49017microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+8EPSS score1.38%
SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49004microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+8EPSS score1.47%
SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49008microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+8EPSS score1.38%
SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49005microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+8EPSS score1.47%
SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-35256microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.55%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35271microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.85%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35272microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+16EPSS score1.85%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2026-21262microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14EPSS score2.08%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-54118microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14EPSS score1.53%
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-73028microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-40370microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14EPSS score1.01%
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-77488microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.40%
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.CVE-2026-77480microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-77487microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-77482microsoftmicrosoft sql server 2017 (cu 31)+5EPSS score0.82%
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-77486microsoftmicrosoft sql server 2017 (cu 31)+5EPSS score0.82%
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-77483microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-77481microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.91%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.