# Microsoft SQL Server 2025 CU10.

Every CVE that names Microsoft SQL Server 2025 CU10 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118120.md)
  `CVE-2026-118120` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118119.md)
  `CVE-2026-118119` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118118.md)
  `CVE-2026-118118` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118117.md)
  `CVE-2026-118117` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118116.md)
  `CVE-2026-118116` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118115.md)
  `CVE-2026-118115` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118114.md)
  `CVE-2026-118114` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118113.md)
  `CVE-2026-118113` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118112.md)
  `CVE-2026-118112` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: Code injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118111.md)
  `CVE-2026-118111` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: CWE-346
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118110.md)
  `CVE-2026-118110` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118109.md)
  `CVE-2026-118109` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118108.md)
  `CVE-2026-118108` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-118106.md)
  `CVE-2026-118106` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-118105.md)
  `CVE-2026-118105` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: SQL injection
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-118104.md)
  `CVE-2026-118104` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-118103.md)
  `CVE-2026-118103` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-118102.md)
  `CVE-2026-118102` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Weak cryptography or TLS
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116947.md)
  `CVE-2026-116947` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116946.md)
  `CVE-2026-116946` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116945.md)
  `CVE-2026-116945` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-116944.md)
  `CVE-2026-116944` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.2 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-116943.md)
  `CVE-2026-116943` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: CWE-126
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116942.md)
  `CVE-2026-116942` · CVE record: Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116941.md)
  `CVE-2026-116941` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-116940.md)
  `CVE-2026-116940` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-116939.md)
  `CVE-2026-116939` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116938.md)
  `CVE-2026-116938` · CVE record: Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116937.md)
  `CVE-2026-116937` · CVE record: Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116936.md)
  `CVE-2026-116936` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.2 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-116935.md)
  `CVE-2026-116935` · CVE record: Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: CWE-126
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-116934.md)
  `CVE-2026-116934` · CVE record: Microsoft Microsoft SQL Server 2017 for x64-based Systems (CU31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116933.md)
  `CVE-2026-116933` · CVE record: Microsoft Microsoft SQL Server 2022 (GDR) and 4 more · CVSS 7.2 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-116932.md)
  `CVE-2026-116932` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116931.md)
  `CVE-2026-116931` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-116930.md)
  `CVE-2026-116930` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Command injection
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-116929.md)
  `CVE-2026-116929` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: Privilege escalation
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84010.md)
  `CVE-2026-84010` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: CWE-749
- [SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88111.md)
  `CVE-2026-88111` · CVE record: Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27) and 1 more · CVSS 7.5 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68783.md)
  `CVE-2026-68783` · CVE record: Microsoft Microsoft SQL Server 2025 CU10 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67374.md)
  `CVE-2026-67374` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67632.md)
  `CVE-2026-67632` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-66813.md)
  `CVE-2026-66813` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67637.md)
  `CVE-2026-67637` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-67382.md)
  `CVE-2026-67382` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-67387.md)
  `CVE-2026-67387` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67646.md)
  `CVE-2026-67646` · CVE record: Microsoft Microsoft SQL Server 2025 CU10 and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67372.md)
  `CVE-2026-67372` · CVE record: Microsoft Microsoft SQL Server 2025 CU10 and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67391.md)
  `CVE-2026-67391` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-94513.md)
  `CVE-2026-94513` · CVE record: Microsoft Microsoft SQL Server 2022 (GDR) and 3 more · CVSS 8.0 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-94511.md)
  `CVE-2026-94511` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Nov 2026 · Tags: Memory corruption
- [Microsoft SQL Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-94520.md)
  `CVE-2026-94520` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-94512.md)
  `CVE-2026-94512` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88089.md)
  `CVE-2026-88089` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-20
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83945.md)
  `CVE-2026-83945` · CVE record: Microsoft Microsoft SQL Server 2022 (GDR) and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96956.md)
  `CVE-2026-96956` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68781.md)
  `CVE-2026-68781` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-sql-server-2025-cu10>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-sql-server-2025-cu10/>. Everything for agents: <https://agentprime.io/llms.txt>.