Microsoft Sql Server 2016 vulnerabilities
100 vulnerabilities
Known vulnerabilities in Microsoft Sql Server 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-59499microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11
EPSS score1.18%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-55227microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.42%
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-47997microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score0.87%
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.CVE-2025-53727microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.16%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-24999microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.71%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-49758microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score0.97%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-49759microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.17%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2025-49719microsoftmicrosoft sql server 2016 for service pack 2 (gdr)+11EPSS score15.50%
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.CVE-2024-21335microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21308microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21303microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.49%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21398microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.85%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21425microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21317microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21373microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21333microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21449microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.61%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21428microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21415microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.79%
SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21414microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+11EPSS score1.85%
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability