Microsoft
Microsoft SQL Server 2017: vulnerabilidades y CVE
Microsoft SQL Server 2017 tiene 144 vulnerabilidades publicadas, 55 de ellas en los últimos 12 meses. 5 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE144
Últimos 12 meses55
Críticas5
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-1068 | Alta (8.8) | 57% | ⚠ Explotación activa | 15 jul 2019 | A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-77488 | Media (5.5) | 0.40% | — | 8 sept 2026 | Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. |
| CVE-2026-77487 | Alta (8.8) | 0.78% | — | 8 sept 2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77486 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77485 | Alta (7) | 0.26% | — | 8 sept 2026 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77483 | Alta (8.8) | 0.78% | — | 8 sept 2026 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77482 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77481 | Alta (8.8) | 0.91% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-77480 | Alta (8.8) | 0.78% | — | 8 sept 2026 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-73028 | Alta (8.8) | 0.78% | — | 8 sept 2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68787 | Alta (7.8) | 0.33% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
| CVE-2026-68786 | Alta (8.8) | 0.91% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-68785 | Media (4.9) | 1.1% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-68784 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68781 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68780 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68779 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68778 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68777 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68776 | Media (6.5) | 1.00% | — | 8 sept 2026 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68775 | Alta (8.8) | 0.91% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67648 | Media (6.5) | 1.00% | — | 8 sept 2026 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67645 | Media (6.5) | 1.00% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67639 | Alta (8.8) | 0.91% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67633 | Media (6.5) | 1.1% | — | 8 sept 2026 | Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-67631 | Crítica (9.8) | 0.97% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-67393 | Media (6.5) | 1.00% | — | 8 sept 2026 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67390 | Media (6.5) | 1.00% | — | 8 sept 2026 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67388 | Alta (8.8) | 0.91% | — | 8 sept 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67386 | Media (6.5) | 1.00% | — | 8 sept 2026 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67385 | Alta (8.8) | 0.91% | — | 8 sept 2026 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.