Advisories · Technology
Microsoft SQL Server 2014 Service Pack 3 (CU 4).
Every CVE that names Microsoft SQL Server 2014 Service Pack 3 (CU 4) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2019 (CU 22)
- Microsoft SQL Server 2022 (CU 8)
- Memory corruption
- CVSS 7.3 High
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Memory corruption
- CVSS 8.8 High
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Insecure deserialization
- CVSS 7.8 High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
- CVSS 8.8 High
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Hard-coded credentials
- CVSS 7.8 High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2014 Service Pack 3 (CU 4)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
- Memory corruption
- CVSS 7.8 High
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
- CVSS 7.5 High
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
- CVSS 8.8 High
Microsoft SQL Elevation of Privilege Vulnerability
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- SQL injection