Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3081▲ 625 respecto a la semana anterior
Críticas / altas1483▲ 317 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)393▲ 186 respecto a la semana anterior
100 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.99% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/7/2026 | 22/7/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Modificada | Alta (8.8) | 0.91% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/7/2026 | 4/8/2026 | External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Modificada | Crítica (9.8) | 1.5% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/7/2026 | 20/8/2026 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | |
| En análisis | Crítica (9.8) | 1.5% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/7/2026 | 20/8/2026 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | |
| Modificada | Alta (7.5) | 0.69% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/7/2026 | 4/8/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 1.0% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 12/5/2026 | 18/6/2026 | External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (8.8) | 0.91% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/4/2026 | 24/7/2026 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. | |
| Analizada | Alta (7.8) | 0.32% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/4/2026 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.8) | 0.32% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 14/4/2026 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (8.8) | 0.99% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 10/3/2026 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 0.96% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 10/3/2026 | 17/6/2026 | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 2.0% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022+1 | 10/3/2026 | 10/7/2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 1.1% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 11/11/2025 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 1.4% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 9/9/2025 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Media (5.3) | 0.84% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 9/9/2025 | 17/6/2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network. | |
| Analizada | Alta (8.8) | 1.2% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 12/8/2025 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 1.2% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 12/8/2025 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 0.97% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 12/8/2025 | 17/6/2026 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (8.8) | 1.7% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 12/8/2025 | 17/6/2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Alta (7.5) | 11% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 8/7/2025 | 17/6/2026 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.8) | 0.61% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 12/11/2024 | 17/6/2026 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability | |
| Analizada | Alta (7.8) | 0.77% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019Microsoft SQL Server 2022 | 12/11/2024 | 17/6/2026 | Microsoft SQL Server Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.5% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019 | 12/11/2024 | 17/6/2026 | SQL Server Native Client Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.4% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019 | 12/11/2024 | 17/6/2026 | SQL Server Native Client Remote Code Execution Vulnerability | |
| Analizada | Alta (8.8) | 1.4% | — | Microsoft SQL Server 2016Microsoft SQL Server 2017Microsoft SQL Server 2019 | 12/11/2024 | 17/6/2026 | SQL Server Native Client Remote Code Execution Vulnerability |