Microsoft SQL Server 2022 For X64 Based Systems (CU 24) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Microsoft SQL Server 2022 For X64 Based Systems (CU 24), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-40370microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14
EPSS score
1.01%
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.7.8CVE-2026-32176microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+17
EPSS score
0.25%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.7.8CVE-2026-32167microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14
EPSS score
0.32%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.