Microsoft Sql Server 2022 X64 Based Systems Cu27 Microsoft Sql Server 2022 X64 Based Systems Cu27

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Microsoft Sql Server 2022 X64 Based Systems Cu27.

By the Year

In 2026 there have been 71 vulnerabilities in Microsoft Sql Server 2022 X64 Based Systems Cu27 with an average score of 7.6 out of ten.

Year Vulnerabilities Average Score
2026 71 7.57

It may take a day or so for new Microsoft Sql Server 2022 X64 Based Systems Cu27 vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Microsoft Sql Server 2022 X64 Based Systems Cu27 Security Vulnerabilities

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118120 8.8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118119 8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118118 8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118117 8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118116 7 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118115 7.5 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118113 8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118114 7.5 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118112 8 - High - November 10, 2026

Improper control of generation of code ('code injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Code Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118111 8 - High - November 10, 2026

Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network.

Origin Validation Error

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118110 8.8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118109 8.8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118108 7.5 - High - November 10, 2026

Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network.

AuthZ

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-118106 8.1 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-118104 6.5 - Medium - November 10, 2026

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Use of Uninitialized Resource

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118105 8.8 - High - November 10, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

SQL Injection

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-118103 6.5 - Medium - November 10, 2026

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

Out-of-bounds Read

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116947 7.5 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-118102 5.9 - Medium - November 10, 2026

Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network.

Use of a Broken or Risky Cryptographic Algorithm

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116946 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116945 9.8 - Critical - November 10, 2026

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-116944 7.2 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-116943 7.5 - High - November 10, 2026

Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.

Buffer Over-read

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116941 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116942 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-116939 5.7 - Medium - November 10, 2026

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds Read

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-116940 4.9 - Medium - November 10, 2026

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds Read

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116938 7.5 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116936 7.2 - High - November 10, 2026

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Stack Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116937 7.5 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-116934 8.8 - High - November 10, 2026

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

Untrusted Pointer Dereference

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-116935 6.5 - Medium - November 10, 2026

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer Over-read

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-116932 6.5 - Medium - November 10, 2026

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds Read

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116933 7.2 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116930 8.8 - High - November 10, 2026

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an unauthorized attacker to execute code over a network.

Command Injection

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116931 7.5 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-116929 7.5 - High - November 10, 2026

Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.

Execution with Unnecessary Privileges

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-84010 7.5 - High - November 10, 2026

Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

Exposed Dangerous Method or Function

Nov 2026: SQL Server Remote Code Execution Vulnerability
CVE-2026-88111 7.5 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67374 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67632 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-66813 8.1 - High - November 10, 2026

Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds Read

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67637 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-67382 6.5 - Medium - November 10, 2026

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Use of Uninitialized Resource

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-67387 8.8 - High - November 10, 2026

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

Untrusted Pointer Dereference

Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-67391 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-94513 8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based Buffer Overflow

Nov 2026: SQL Server Remote Code Execution Vulnerability
CVE-2026-94511 8.8 - High - November 10, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Oct 2026: Microsoft SQL Server Denial of Service Vulnerability
CVE-2026-94520 4.9 - Medium - October 13, 2026

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

Use of Externally-Controlled Format String

Oct 2026: SQL Server Remote Code Execution Vulnerability
CVE-2026-94512 8.8 - High - October 13, 2026

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based Buffer Overflow

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Microsoft Sql Server 2022 X64 Based Systems Cu27 or by Microsoft? Click the Watch button to subscribe.

Microsoft
Vendor

subscribe