Advisories · Technology

Microsoft SQL Server 2025 CU10.

Every CVE that names Microsoft SQL Server 2025 CU10 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118120 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118119 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118118 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118117 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118116 CVE record

CVSS 7.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118115 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118114 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118113 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118112 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Code injection
Not analysed yet 10 Nov 2026
CVE-2026-118111 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- CWE-346
Not analysed yet 10 Nov 2026
CVE-2026-118110 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118109 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118108 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
Not analysed yet 10 Nov 2026
CVE-2026-118106 CVE record

CVSS 8.1 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-118105 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- SQL injection
Not analysed yet 10 Nov 2026
CVE-2026-118104 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-118103 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-118102 CVE record

CVSS 5.9 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Weak cryptography or TLS
Not analysed yet 10 Nov 2026
CVE-2026-116947 CVE record

CVSS 7.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116946 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116945 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116944 CVE record

CVSS 7.2 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116943 CVE record

CVSS 7.5 High

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- CWE-126
Not analysed yet 10 Nov 2026
CVE-2026-116942 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116941 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116940 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116939 CVE record

CVSS 5.7 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116938 CVE record

CVSS 7.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116937 CVE record

CVSS 7.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116936 CVE record

CVSS 7.2 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116935 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2019 (GDR)
- CWE-126
Not analysed yet 10 Nov 2026
CVE-2026-116934 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116933 CVE record

CVSS 7.2 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116932 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116931 CVE record

CVSS 7.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-116930 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Command injection
Not analysed yet 10 Nov 2026
CVE-2026-116929 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Privilege escalation
Not analysed yet 10 Nov 2026
CVE-2026-84010 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- CWE-749
Not analysed yet 10 Nov 2026
CVE-2026-88111 CVE record

CVSS 7.5 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Microsoft SQL Server 2025 CU10
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-68783 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 CU10
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67374 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67632 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-66813 CVE record

CVSS 8.1 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67637 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67382 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67387 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67646 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2025 CU10
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67372 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2025 CU10
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-67391 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-94513 CVE record

CVSS 8.0 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2022 (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-94511 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 10 Nov 2026
CVE-2026-94520 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-94512 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-88089 CVE record

CVSS 6.7 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
- CWE-20
Not analysed yet 13 Oct 2026
CVE-2026-83945 CVE record

CVSS 6.6 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-96956 CVE record

CVSS 8.0 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-68781 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026