Sql Server 2025
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Sql Server 2025 (5e4ed695-2ccf-546c-9288-439792f60adc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | x64 |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40370 |
vulnerable | 2026-06-08 08:01:20.396900 |
SQL Server Remote Code Execution Vulnerability
HIGH (8.8)
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
Published: 2026-05-12T16:59:21.097Z
Updated: 2026-06-19T16:12:53.223Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33120 |
vulnerable | 2026-06-08 07:57:18.694842 |
Microsoft SQL Server Remote Code Execution Vulnerability
HIGH (8.8)
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
Published: 2026-04-14T16:57:48.207Z
Updated: 2026-06-19T16:08:10.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32176 |
vulnerable | 2026-06-08 07:57:16.970252 |
SQL Server Elevation of Privilege Vulnerability
MEDIUM (6.7)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
Published: 2026-04-14T16:58:32.054Z
Updated: 2026-06-19T16:08:45.679Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32167 |
vulnerable | 2026-06-08 07:57:16.922140 |
SQL Server Elevation of Privilege Vulnerability
MEDIUM (6.7)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
Published: 2026-04-14T16:57:30.245Z
Updated: 2026-06-19T16:07:57.371Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26116 |
vulnerable | 2026-06-08 07:53:20.926473 |
SQL Server Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published: 2026-03-10T17:05:07.935Z
Updated: 2026-06-19T18:17:50.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26115 |
vulnerable | 2026-06-08 07:53:20.921771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21262 |
vulnerable | 2026-06-08 07:49:14.668984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20803 |
vulnerable | 2026-06-08 07:49:12.638091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.