Microsoft SQL Server 2022 (GDR)
Microsoft- Software type
- —
- Catalog vulnerabilities
- 175
Severity across 175 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 175 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, Microsoft SQL Server 2022 (GDR) has 56 security vulnerabilities published in the last 90 days. Of these, 34 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Microsoft SQL Server 2022 (GDR) and determine which vulnerabilities affect that version.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-77481Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67645Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67624Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-66819Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-78456SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77488Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-77485SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77487SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77484Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77483SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-77480SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-73028SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-47297Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68780Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68779Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68778Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68777Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68776Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68775Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67648Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67641Microsoft SQL Server Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67639Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67393Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67390Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67388Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67386Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67385Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67381Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67380Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-66820SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-66818Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-66816Microsoft SQL Server Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-66814Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-73029Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68786Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67643Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67636Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67389Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67384Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67379Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67376Microsoft SQL Server Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67378Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68787Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-68785Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68784Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-68781Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67633Microsoft SQL Server Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67631Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67630Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67629Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-67370Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-67368Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-47295Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-55002Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-54118Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityCritical |
CVE-2026-47296Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-40370SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-32176SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityMedium |
CVE-2026-33120Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32167SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityMedium |
CVE-2026-26115SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-21262SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-20803Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2025-59499Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-55227Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-47997Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityMedium |
CVE-2025-47954Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-49759Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-24999Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-53727Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-49758Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityHigh |
CVE-2025-49718Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-49719Microsoft SQL Server Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-49717Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2024-49021Microsoft SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-49043Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/12/2024 | SeverityHigh |
CVE-2024-37980Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37341Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37965Microsoft SQL Server Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-26191Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-26186Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37342Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37337Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37339Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37340Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37335Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37966Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-37338Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/10/2024 | SeverityHigh |
CVE-2024-35256SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-28928SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37336SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37333SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37334Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37330SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37329SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37328SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37327SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37326SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-21449SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CVE-2024-37324SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/09/2024 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan