Microsoft Sql Server 2019 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Sql Server 2019, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (137)

• CVE-2024-49003 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-21303 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21308 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21317 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21331 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21332 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21333 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21335 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21373 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21398 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21414 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21415 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21425 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21428 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-21449 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-26186 — CVSS 8.8 (high): Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
• CVE-2024-26191 — CVSS 8.8 (high): Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
• CVE-2024-28906 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28908 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28909 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28910 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28911 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28912 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28913 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28914 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28915 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28926 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28927 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28928 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-28929 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28930 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28931 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28932 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28933 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28934 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28935 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28936 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28937 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28938 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28939 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28940 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28941 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28942 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28943 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28944 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-28945 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29043 — CVSS 8.8 (high): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29044 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-49017 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49018 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2025-24999 — CVSS 8.8 (high): Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
• CVE-2025-49758 — CVSS 8.8 (high): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2025-49759 — CVSS 8.8 (high): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2025-53727 — CVSS 8.8 (high): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2025-55227 — CVSS 8.8 (high): Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2025-59499 — CVSS 8.8 (high): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2026-21262 — CVSS 8.8 (high): Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
• CVE-2026-26115 — CVSS 8.8 (high): Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.
• CVE-2026-26116 — CVSS 8.8 (high): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2026-33120 — CVSS 8.8 (high): Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
• CVE-2026-40370 — CVSS 8.8 (high): External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
• CVE-2024-29046 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29047 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29048 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29982 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29983 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29984 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-29985 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-35256 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-35271 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-35272 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37318 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37319 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37320 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37321 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37322 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37323 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37324 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37326 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37327 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37328 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37329 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37330 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37331 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37332 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37333 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37334 — CVSS 8.8 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2024-37335 — CVSS 8.8 (high): Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
• CVE-2024-37336 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-37338 — CVSS 8.8 (high): Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
• CVE-2024-37339 — CVSS 8.8 (high): Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
• CVE-2024-37340 — CVSS 8.8 (high): Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
• CVE-2024-37341 — CVSS 8.8 (high): Microsoft SQL Server Elevation of Privilege Vulnerability
• CVE-2024-37965 — CVSS 8.8 (high): Microsoft SQL Server Elevation of Privilege Vulnerability
• CVE-2024-37980 — CVSS 8.8 (high): Microsoft SQL Server Elevation of Privilege Vulnerability
• CVE-2024-38087 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-38088 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-38255 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-43459 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-43462 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48993 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48994 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48995 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48996 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48997 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48998 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-48999 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49000 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49001 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49002 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-20701 — CVSS 8.8 (high): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
• CVE-2024-49004 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49005 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49006 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49007 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49008 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49009 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49010 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49011 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49012 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49013 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49014 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49015 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2024-49016 — CVSS 8.8 (high): SQL Server Native Client Remote Code Execution Vulnerability
• CVE-2025-49717 — CVSS 8.5 (high): Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
• CVE-2024-49021 — CVSS 7.8 (high): Microsoft SQL Server Remote Code Execution Vulnerability
• CVE-2024-49043 — CVSS 7.8 (high): Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
• CVE-2024-43474 — CVSS 7.6 (high): Microsoft SQL Server Information Disclosure Vulnerability
• CVE-2024-29045 — CVSS 7.5 (high): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
• CVE-2025-49718 — CVSS 7.5 (high): Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
• CVE-2025-49719 — CVSS 7.5 (high): Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
• CVE-2024-37966 — CVSS 7.1 (high): Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
• CVE-2024-37342 — CVSS 7.1 (high): Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
• CVE-2024-37337 — CVSS 7.1 (high): Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
• CVE-2026-32167 — CVSS 6.7 (medium): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2026-32176 — CVSS 6.7 (medium): Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…
• CVE-2025-47997 — CVSS 6.5 (medium): Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to…