Advisories · Technology

Microsoft SQL Server 2025 for x64-based Systems (GDR).

Every CVE that names Microsoft SQL Server 2025 for x64-based Systems (GDR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-67389 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2022 (CU 26)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67384 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67383 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 (CU8)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-67379 CVE record

CVSS 8.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67376 CVE record

CVSS 7.5 High

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67378 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68787 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68785 CVE record

CVSS 4.9 Medium

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68784 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-68781 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67633 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67631 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67630 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67629 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67373 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2025 (CU8)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-67370 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-67368 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-54116 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Memory corruption
Not analysed yet 14 Jul 2026
CVE-2026-50468 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-47295 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-55002 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 14 Jul 2026
CVE-2026-54118 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Insecure deserialization
Not analysed yet 14 Jul 2026
CVE-2026-54117 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Insecure deserialization
Not analysed yet 14 Jul 2026
CVE-2026-47296 CVE record

CVSS 7.5 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Jul 2026
CVE-2026-40370 CVE record

CVSS 8.8 High

SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
Not analysed yet 12 May 2026
CVE-2026-32176 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-32167 CVE record

CVSS 6.7 Medium

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 14 Apr 2026
CVE-2026-26116 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2025 (CU 2)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- SQL injection
Not analysed yet 10 Mar 2026
CVE-2026-26115 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-1287
Not analysed yet 10 Mar 2026
CVE-2026-21262 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2026-20803 CVE record

CVSS 7.2 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2022 (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU 22)
- Authentication bypass
Not analysed yet 13 Jan 2026