Microsoft SQL Server 2017 (CU 31)
Microsoft- Software type
- —
- Catalog vulnerabilities
- 150
Severity across 150 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 150 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, Microsoft SQL Server 2017 (CU 31) has 49 security vulnerabilities published in the last 90 days. Of these, 30 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Microsoft SQL Server 2017 (CU 31) and determine which vulnerabilities affect that version.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-77481Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67645Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-66819Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-78441Windows OLE DB Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-78442Windows OLE DB Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-69562Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-77488Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-77486Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77485SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77487SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77483SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77480SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-73028SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68780Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68779Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68778Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68777Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68776Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68775Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67648Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67639Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67393Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67390Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67388Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67386Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67385Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67381Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67380Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-66820SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-66818Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-66814Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68786Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67384Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67376Microsoft SQL Server Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68787Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68785Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68784Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68781Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67633Microsoft SQL Server Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67631Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67630Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67629Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67370Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67368Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77482Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-47295Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-55002Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-54118Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityCritical |
CVE-2026-47296Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-40370SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-32176SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityMedium |
CVE-2026-32167SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityMedium |
CVE-2026-26115SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-21262SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2025-59499Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-55227Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-47997Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityMedium |
CVE-2025-49759Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-24999Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-53727Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-49758Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-49719Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2024-49021Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49018SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49017SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49016SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49015SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49014SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49013SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49012SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49011SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49010SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49009SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49008SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49006SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49007SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49005SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49004SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49003SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49002SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49001SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49000SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48999SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48998SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48997SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48993SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49043Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48996SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48995SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-48994SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-43462SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-43459SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-38255SQL Server Native Client Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-37980Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37341Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37965Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-43474Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-26191Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-26186Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37342Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan