Microsoft SQL Server 2019 (Gdr) vulnerabilities, page 2
222 vulnerabilities
Known vulnerabilities in Microsoft SQL Server 2019 (Gdr), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-59499microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Elevation of Privilege VulnerabilityImproper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS1.18%HighCVE-2025-55227microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Elevation of Privilege VulnerabilityImproper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS1.42%MediumCVE-2025-47997microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Information Disclosure VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.EPSS0.87%HighCVE-2025-53727microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Elevation of Privilege VulnerabilityImproper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS1.16%HighCVE-2025-24999microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Elevation of Privilege VulnerabilityImproper access control in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS1.71%HighCVE-2025-49758microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Elevation of Privilege VulnerabilityImproper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS0.97%HighCVE-2025-49717microsoft · microsoft sql server 2019 (cu 32) +5 moreMicrosoft SQL Server Remote Code Execution VulnerabilityHeap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.EPSS1.12%HighCVE-2025-49759microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreMicrosoft SQL Server Elevation of Privilege VulnerabilityImproper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.EPSS1.17%HighCVE-2025-49719microsoft · microsoft sql server 2016 for service pack 2 (gdr) +11 moreMicrosoft SQL Server Information Disclosure VulnerabilityImproper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.EPSS15.50%HighCVE-2025-49718microsoft · microsoft sql server 2019 (cu 32) +5 moreMicrosoft SQL Server Information Disclosure VulnerabilityUse of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.EPSS3.90%HighCVE-2022-29143microsoft · microsoft sql server 2014 service pack 3 (cu 4) +10 moreMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS2.00%HighCVE-2024-21335microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.79%HighCVE-2024-21308microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.61%HighCVE-2024-21303microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.49%HighCVE-2024-21398microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.85%HighCVE-2024-21425microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.61%HighCVE-2024-21317microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.61%HighCVE-2024-21373microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.79%HighCVE-2024-21333microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.79%HighCVE-2024-21449microsoft · microsoft sql server 2016 service pack 3 azure connect feature pack +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS1.61%