Advisories · Technology

Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR).

Every CVE that names Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-29143 CVE record

CVSS 7.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
Not analysed yet 15 Jun 2022
CVE-2021-1636 CVE record

CVSS 8.8 High

Microsoft SQL Elevation of Privilege Vulnerability
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- SQL injection
Not analysed yet 12 Jan 2021
CVE-2020-0618 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Deserialization of untrusted data in Microsoft SQL Server and others
- Microsoft SQL Server
- Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
- Insecure deserialization
Not analysed yet 11 Feb 2020
CVE-2019-1068 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Improper input validation in Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) and others
- Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)
- Microsoft SQL Server
- CWE-20
Not analysed yet 15 Jul 2019