Microsoft SQL Server 2019 (CU 32) vulnerabilities, page 4
71 vulnerabilities
Known vulnerabilities in Microsoft SQL Server 2019 (CU 32), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-67639microsoftmicrosoft sql server 2017 (cu 31)+11
EPSS score0.91%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-67388microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.91%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-67631microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.97%
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-67370microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.99%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-67393microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-67384microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.91%
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-69562microsoftmicrosoft sql server 2017 (cu 31)+5EPSS score0.92%
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.CVE-2026-32176microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+17EPSS score0.25%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.CVE-2026-32167microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14EPSS score0.32%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.CVE-2026-78441microsoftmicrosoft sql server 2017 (cu 31)+5EPSS score0.92%
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.CVE-2026-78442microsoftmicrosoft sql server 2017 (cu 31)+5EPSS score0.82%
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.