MS
Product
Microsoft SQL Server 2017 (GDR)
155
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 4High 123Medium 28Low 0
Watch
Add Microsoft SQL Server 2017 (GDR) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21373 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2056.2 |
| CVE-2024-21335 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2056.2 |
| CVE-2024-21333 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2056.2 |
| CVE-2024-21332 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2056.2 |
| CVE-2024-38087 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2056.2 |
| CVE-2024-38088 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2056.2 |
| CVE-2026-85886 | 8.5 | Oct 13 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2140.2 |
| CVE-2026-68883 | 8.5 | Oct 13 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 14.0.0 before 14.0.2140.2 |
| CVE-2026-67625 | 8.5 | Oct 13 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2140.2 |
| CVE-2026-96956 | 8.0 | Oct 13 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.0 before 14.0.2140.2 |
| CVE-2026-68787 | 7.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2130.4 |
| CVE-2026-32176 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.0 before 14.0.2105.1 |
| CVE-2026-32167 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.0 before 14.0.2105.1 |
| CVE-2024-49021 | 7.8 | Nov 12 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2070.1 |
| CVE-2024-49043 | 7.8 | Nov 12 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Affected: 14.0.0 before 14.0.2070.1 |
| CVE-2026-85888 | 7.7 | Oct 13 | Microsoft SQL Server Information Disclosure Vulnerability Affected: 14.0.0 before 14.0.2140.2 |
| CVE-2026-88081 | 7.7 | Oct 13 | Microsoft SQL Server Information Disclosure Vulnerability Affected: 14.0.0 before 14.0.2140.2 |
| CVE-2026-67376 | 7.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: 14.0.0 before 14.0.2130.4 |
| CVE-2026-47296 | 7.5 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 14.0.0 before 14.0.2120.1 |
| CVE-2025-49719 | 7.5 | Jul 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: 14.0.0 before 14.0.2075.8 |
| CVE-2024-43474 | 7.5 | Sep 10 | Microsoft SQL Server Information Disclosure Vulnerability Affected: 14.0.0 before 14.0.2060.1 |
| CVE-2024-37966 | 7.1 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 14.0.0 before 14.0.2060.1 |
| CVE-2026-77485 | 7.0 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.0 before 14.0.2130.4 |