Advisories · Technology

Microsoft SQL Server 2016 Service Pack 3 (GDR).

Every CVE that names Microsoft SQL Server 2016 Service Pack 3 (GDR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47295 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-55002 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 14 Jul 2026
CVE-2026-54118 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Insecure deserialization
Not analysed yet 14 Jul 2026
CVE-2026-47296 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-40370 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 12 May 2026
CVE-2026-32176 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-32167 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-26115 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-1287
Not analysed yet 10 Mar 2026
CVE-2026-21262 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2025-59499 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 11 Nov 2025
CVE-2025-55227 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Command injection
Not analysed yet 9 Sept 2025
CVE-2025-47997 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Information disclosure
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-49759 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 12 Aug 2025
CVE-2025-24999 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 12 Aug 2025
CVE-2025-53727 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 12 Aug 2025
CVE-2025-49758 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 12 Aug 2025
CVE-2024-49021 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49018 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- CWE-197
Not analysed yet 12 Nov 2024
CVE-2024-49017 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49016 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49015 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49014 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49013 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49012 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49011 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49010 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49009 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49008 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49006 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49007 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49005 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49004 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49003 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49002 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49001 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49000 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48999 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48998 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48997 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48993 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49043 CVE record

CVSS 7.8 High

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- CWE-426
Not analysed yet 12 Nov 2024
CVE-2024-48996 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48995 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48994 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43462 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43459 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-38255 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-37980 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-37341 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-37965 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-35256 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-28928 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37336 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37333 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37330 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37329 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37328 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37327 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37326 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21449 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024