Advisories · Technology

Microsoft SQL Server 2019 (GDR).

Every CVE that names Microsoft SQL Server 2019 (GDR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94520 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-94512 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88089 CVE record

CVSS 6.7 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
- CWE-20
Not analysed yet 13 Oct 2026
CVE-2026-88085 CVE record

CVSS 6.4 Medium

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88088 CVE record

CVSS 7.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-85919 CVE record

CVSS 7.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88086 CVE record

CVSS 5.3 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88084 CVE record

CVSS 5.3 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-85888 CVE record

CVSS 7.7 High

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88081 CVE record

CVSS 7.7 High

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88082 CVE record

CVSS 7.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-67628 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-65674 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Insecure deserialization
Not analysed yet 13 Oct 2026
CVE-2026-85886 CVE record

CVSS 8.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-85876 CVE record

CVSS 7.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-70189 CVE record

CVSS 6.7 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-68883 CVE record

CVSS 8.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-67625 CVE record

CVSS 8.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96956 CVE record

CVSS 8.0 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-77481 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67645 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67624 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66819 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-78441 CVE record

CVSS 6.5 Medium

Windows OLE DB Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-78442 CVE record

CVSS 8.8 High

Windows OLE DB Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-69562 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77488 CVE record

CVSS 5.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77486 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77485 CVE record

CVSS 7.0 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77487 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-77484 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Insecure deserialization
Not analysed yet 8 Sept 2026
CVE-2026-77483 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-77480 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-1220
Not analysed yet 8 Sept 2026
CVE-2026-73028 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-47297 CVE record

CVSS 8.1 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Insecure deserialization
Not analysed yet 8 Sept 2026
CVE-2026-68780 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68779 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68778 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68777 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68776 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68775 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67648 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67639 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67393 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67390 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67388 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67386 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67385 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67381 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67380 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66820 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-66818 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Privilege escalation
Not analysed yet 8 Sept 2026
CVE-2026-66814 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-1220
Not analysed yet 8 Sept 2026
CVE-2026-73029 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-68786 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67636 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67384 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67379 CVE record

CVSS 8.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67376 CVE record

CVSS 7.5 High

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67378 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026