Advisories · Technology

Microsoft SQL Server 2019 (CU 32).

Every CVE that names Microsoft SQL Server 2019 (CU 32) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77481 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67645 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67624 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66819 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-78441 CVE record

CVSS 6.5 Medium

Windows OLE DB Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-78442 CVE record

CVSS 8.8 High

Windows OLE DB Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-69562 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77488 CVE record

CVSS 5.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77486 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77485 CVE record

CVSS 7.0 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77487 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-77484 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Insecure deserialization
Not analysed yet 8 Sept 2026
CVE-2026-77483 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-77480 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-1220
Not analysed yet 8 Sept 2026
CVE-2026-73028 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-47297 CVE record

CVSS 8.1 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Insecure deserialization
Not analysed yet 8 Sept 2026
CVE-2026-68780 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68779 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68778 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68777 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68776 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68775 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67648 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67639 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67393 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67390 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67388 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67386 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67385 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67381 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67380 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66820 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-66818 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Privilege escalation
Not analysed yet 8 Sept 2026
CVE-2026-66814 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-1220
Not analysed yet 8 Sept 2026
CVE-2026-73029 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-68786 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67636 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67384 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67379 CVE record

CVSS 8.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67376 CVE record

CVSS 7.5 High

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67378 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68787 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68785 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68784 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68781 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67633 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67631 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67630 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67629 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67370 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-67368 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-77482 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-47295 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-55002 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 14 Jul 2026
CVE-2026-54118 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Insecure deserialization
Not analysed yet 14 Jul 2026
CVE-2026-47296 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-40370 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 12 May 2026
CVE-2026-32176 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-32167 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-26115 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-1287
Not analysed yet 10 Mar 2026