Advisories · Technology

Microsoft SQL Server 2017 (CU 31).

Every CVE that names Microsoft SQL Server 2017 (CU 31) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77481 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67645 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66819 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-78441 CVE record

CVSS 6.5 Medium

Windows OLE DB Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-78442 CVE record

CVSS 8.8 High

Windows OLE DB Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-69562 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77488 CVE record

CVSS 5.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77486 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77485 CVE record

CVSS 7.0 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77487 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-77483 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-77480 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-1220
Not analysed yet 8 Sept 2026
CVE-2026-73028 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-68780 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68779 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68778 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68777 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68776 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68775 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67648 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67639 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67393 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67390 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67388 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67386 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67385 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67381 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67380 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66820 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-66818 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Privilege escalation
Not analysed yet 8 Sept 2026
CVE-2026-66814 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-1220
Not analysed yet 8 Sept 2026
CVE-2026-68786 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67384 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67376 CVE record

CVSS 7.5 High

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68787 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68785 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68784 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68781 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67633 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67631 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67630 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67629 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67370 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-67368 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-77482 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-47295 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-55002 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 14 Jul 2026
CVE-2026-54118 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Insecure deserialization
Not analysed yet 14 Jul 2026
CVE-2026-47296 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-40370 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 12 May 2026
CVE-2026-32176 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-32167 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-26115 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-1287
Not analysed yet 10 Mar 2026
CVE-2026-21262 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2025-59499 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 11 Nov 2025
CVE-2025-55227 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Command injection
Not analysed yet 9 Sept 2025
CVE-2025-47997 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Information disclosure
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-49759 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 12 Aug 2025
CVE-2025-24999 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 12 Aug 2025
CVE-2025-53727 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 12 Aug 2025