Microsoft Sql Server Management Studio — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Sql Server Management Studio, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-29803 — CVSS 7.3 (high): Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to…
• CVE-2019-1313 — CVSS 6.5 (medium): An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions…
• CVE-2019-1376 — CVSS 6.5 (medium): An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions…
• CVE-2018-8527 — CVSS 5.5 (medium): An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file…
• CVE-2018-8532 — CVSS 5.5 (medium): An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file…
• CVE-2018-8533 — CVSS 5.5 (medium): An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content…
• CVE-2020-1455 — CVSS 5.3 (medium): A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could…