{"schema_version":1,"title":"Microsoft SQL Server vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 65 vulnerabilities in Microsoft SQL Server: 0 in the last 7 days and 62 in the last 90 days, 8 of them critical and 3 exploited in the wild. The most recent, CVE-2026-78456, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/sql-server","json_url":"https://junglewise.ai/threats/technologies/sql-server.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/sql-server","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":33,"all_time":65,"critical":8,"exploited":3,"last_7_days":0,"last_30_days":60,"last_90_days":62,"last_365_days":63},"latest":[{"cve":"CVE-2026-78456","cvss":8.8,"epss":0.0091,"slug":"cve-2026-78456-microsoft-sql-server-heap-buffer-overflow","title":"Microsoft SQL Server heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:44.28+00:00","url":"https://junglewise.ai/threats/cve-2026-78456-microsoft-sql-server-heap-buffer-overflow"},{"cve":"CVE-2026-77488","cvss":5.5,"epss":0.004,"slug":"cve-2026-77488-microsoft-sql-server-integer-underflow-vulnerability","title":"Microsoft SQL Server integer underflow vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-08T18:20:34.527+00:00","url":"https://junglewise.ai/threats/cve-2026-77488-microsoft-sql-server-integer-underflow-vulnerability"},{"cve":"CVE-2026-77487","cvss":8.8,"epss":0.0078,"slug":"cve-2026-77487-microsoft-sql-server-privilege-escalation-over-network","title":"Microsoft SQL Server privilege escalation over network","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:34.397+00:00","url":"https://junglewise.ai/threats/cve-2026-77487-microsoft-sql-server-privilege-escalation-over-network"},{"cve":"CVE-2026-77486","cvss":8.8,"epss":0.0082,"slug":"cve-2026-77486-microsoft-sql-server-integer-overflow-in-network-handler","title":"Microsoft SQL Server integer overflow in network handler","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:34.277+00:00","url":"https://junglewise.ai/threats/cve-2026-77486-microsoft-sql-server-integer-overflow-in-network-handler"},{"cve":"CVE-2026-77485","cvss":7,"epss":0.0026,"slug":"cve-2026-77485-microsoft-sql-server-use-after-free-privilege-escalation","title":"Microsoft SQL Server use after free privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:34.147+00:00","url":"https://junglewise.ai/threats/cve-2026-77485-microsoft-sql-server-use-after-free-privilege-escalation"},{"cve":"CVE-2026-77484","cvss":8.8,"epss":0.0169,"slug":"cve-2026-77484-microsoft-sql-server-unsafe-deserialization-remote-code-execution","title":"Microsoft SQL Server unsafe deserialization remote code execution","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:34.023+00:00","url":"https://junglewise.ai/threats/cve-2026-77484-microsoft-sql-server-unsafe-deserialization-remote-code-execution"},{"cve":"CVE-2026-77483","cvss":8.8,"epss":0.0078,"slug":"cve-2026-77483-microsoft-sql-server-weak-authentication-privilege-escalation","title":"Microsoft SQL Server weak authentication privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:33.89+00:00","url":"https://junglewise.ai/threats/cve-2026-77483-microsoft-sql-server-weak-authentication-privilege-escalation"},{"cve":"CVE-2026-77482","cvss":8.8,"epss":0.0082,"slug":"cve-2026-77482-microsoft-sql-server-heap-based-buffer-overflow","title":"Microsoft SQL Server heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:33.77+00:00","url":"https://junglewise.ai/threats/cve-2026-77482-microsoft-sql-server-heap-based-buffer-overflow"},{"cve":"CVE-2026-77481","cvss":8.8,"epss":0.0091,"slug":"cve-2026-77481-microsoft-sql-server-heap-based-buffer-overflow","title":"Microsoft SQL Server heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:33.633+00:00","url":"https://junglewise.ai/threats/cve-2026-77481-microsoft-sql-server-heap-based-buffer-overflow"},{"cve":"CVE-2026-77480","cvss":8.8,"epss":0.0078,"slug":"cve-2026-77480-microsoft-sql-server-privilege-escalation-via-insufficient-access","title":"Microsoft SQL Server privilege escalation via insufficient access control","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:33.5+00:00","url":"https://junglewise.ai/threats/cve-2026-77480-microsoft-sql-server-privilege-escalation-via-insufficient-access"},{"cve":"CVE-2026-73029","cvss":6.5,"epss":0.01,"slug":"cve-2026-73029-microsoft-sql-server-buffer-over-read-information-disclosure","title":"Microsoft SQL Server buffer over-read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:20:32.987+00:00","url":"https://junglewise.ai/threats/cve-2026-73029-microsoft-sql-server-buffer-over-read-information-disclosure"},{"cve":"CVE-2026-73028","cvss":8.8,"epss":0.0078,"slug":"cve-2026-73028-microsoft-sql-server-privilege-escalation-via-improper-access","title":"Microsoft SQL Server privilege escalation via improper access control","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:32.83+00:00","url":"https://junglewise.ai/threats/cve-2026-73028-microsoft-sql-server-privilege-escalation-via-improper-access"},{"cve":"CVE-2026-69562","cvss":6.5,"epss":0.0094,"slug":"cve-2026-69562-microsoft-sql-server-out-of-bounds-read-information-disclosure","title":"Microsoft SQL Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:19:25.067+00:00","url":"https://junglewise.ai/threats/cve-2026-69562-microsoft-sql-server-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-68787","cvss":7.8,"epss":0.0033,"slug":"cve-2026-68787-microsoft-sql-server-heap-based-buffer-overflow","title":"Microsoft SQL Server heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:18:26.313+00:00","url":"https://junglewise.ai/threats/cve-2026-68787-microsoft-sql-server-heap-based-buffer-overflow"},{"cve":"CVE-2026-68786","cvss":8.8,"epss":0.0091,"slug":"cve-2026-68786-microsoft-sql-server-heap-based-buffer-overflow","title":"Microsoft SQL Server heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:18:26.18+00:00","url":"https://junglewise.ai/threats/cve-2026-68786-microsoft-sql-server-heap-based-buffer-overflow"},{"cve":"CVE-2026-68785","cvss":4.9,"epss":0.0112,"slug":"cve-2026-68785-microsoft-sql-server-heap-buffer-overflow","title":"Microsoft SQL Server heap buffer overflow","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:26.053+00:00","url":"https://junglewise.ai/threats/cve-2026-68785-microsoft-sql-server-heap-buffer-overflow"},{"cve":"CVE-2026-68784","cvss":6.5,"epss":0.01,"slug":"cve-2026-68784-microsoft-sql-server-out-of-bounds-read-information-disclosure","title":"Microsoft SQL Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:25.92+00:00","url":"https://junglewise.ai/threats/cve-2026-68784-microsoft-sql-server-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-68781","cvss":6.5,"epss":0.01,"slug":"cve-2026-68781-microsoft-sql-server-out-of-bounds-read-allows-information","title":"Microsoft SQL Server out-of-bounds read allows information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:25.72+00:00","url":"https://junglewise.ai/threats/cve-2026-68781-microsoft-sql-server-out-of-bounds-read-allows-information"},{"cve":"CVE-2026-68780","cvss":6.5,"epss":0.01,"slug":"cve-2026-68780-microsoft-sql-server-out-of-bounds-read","title":"Microsoft SQL Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:25.587+00:00","url":"https://junglewise.ai/threats/cve-2026-68780-microsoft-sql-server-out-of-bounds-read"},{"cve":"CVE-2026-68779","cvss":6.5,"epss":0.01,"slug":"cve-2026-68779-microsoft-sql-server-out-of-bounds-read-information-disclosure","title":"Microsoft SQL Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:25.453+00:00","url":"https://junglewise.ai/threats/cve-2026-68779-microsoft-sql-server-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-68777","cvss":6.5,"epss":0.01,"slug":"cve-2026-68777-microsoft-sql-server-out-of-bounds-read-information-disclosure","title":"Microsoft SQL Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:25.197+00:00","url":"https://junglewise.ai/threats/cve-2026-68777-microsoft-sql-server-out-of-bounds-read-information-disclosure"},{"cve":"CVE-2026-68776","cvss":6.5,"epss":0.01,"slug":"cve-2026-68776-microsoft-sql-server-uninitialized-resource-information","title":"Microsoft SQL Server uninitialized resource information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:25.063+00:00","url":"https://junglewise.ai/threats/cve-2026-68776-microsoft-sql-server-uninitialized-resource-information"},{"cve":"CVE-2026-68775","cvss":8.8,"epss":0.0091,"slug":"cve-2026-68775-microsoft-sql-server-heap-buffer-overflow","title":"Microsoft SQL Server heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:18:24.927+00:00","url":"https://junglewise.ai/threats/cve-2026-68775-microsoft-sql-server-heap-buffer-overflow"},{"cve":"CVE-2026-67648","cvss":6.5,"epss":0.01,"slug":"cve-2026-67648-microsoft-sql-server-uninitialized-resource-information","title":"Microsoft SQL Server uninitialized resource information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:24.79+00:00","url":"https://junglewise.ai/threats/cve-2026-67648-microsoft-sql-server-uninitialized-resource-information"},{"cve":"CVE-2026-67645","cvss":6.5,"epss":0.01,"slug":"cve-2026-67645-microsoft-sql-server-out-of-bounds-read-information-disclosure","title":"Microsoft SQL Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-08T18:18:24.66+00:00","url":"https://junglewise.ai/threats/cve-2026-67645-microsoft-sql-server-out-of-bounds-read-information-disclosure"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":5,"exploited":0,"vulnerabilities":60},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft Windows","slug":"windows-","vulnerabilities":963,"url":"https://junglewise.ai/threats/technologies/windows-"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":293,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":213,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":211,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":192,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":178,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":167,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows 11 Version 26H1","slug":"windows-11-version-26h1","vulnerabilities":135,"url":"https://junglewise.ai/threats/technologies/windows-11-version-26h1"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":124,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"}],"technology":{"hub":true,"name":"Microsoft SQL Server","slug":"sql-server","vendor":{"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":[],"category":"database","url":"https://junglewise.ai/threats/technologies/sql-server"},"most_severe":[{"cve":"CVE-2020-0618","cvss":8.8,"slug":"cve-2020-0618-microsoft-sql-server-reporting-services-remote-code-execution","title":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-0618-microsoft-sql-server-reporting-services-remote-code-execution"},{"cve":"CVE-2012-1856","cvss":8.8,"slug":"cve-2012-1856-microsoft-office-mscomctl-ocx-remote-code-execution-vulnerability","title":"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1856-microsoft-office-mscomctl-ocx-remote-code-execution-vulnerability"},{"cve":"CVE-2019-1068","epss":0.5791,"slug":"cve-2019-1068-microsoft-sql-server-remote-code-execution","title":"Microsoft SQL Server remote code execution","severity":"critical","exploited":true,"published_at":"2026-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-1068-microsoft-sql-server-remote-code-execution"},{"cve":"CVE-2026-67643","cvss":9.8,"epss":0.0097,"slug":"cve-2026-67643-microsoft-sql-server-heap-based-buffer-overflow","title":"Microsoft SQL Server heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:24.53+00:00","url":"https://junglewise.ai/threats/cve-2026-67643-microsoft-sql-server-heap-based-buffer-overflow"},{"cve":"CVE-2026-67631","cvss":9.8,"epss":0.0097,"slug":"cve-2026-67631-microsoft-sql-server-heap-buffer-overflow","title":"Microsoft SQL Server heap buffer overflow","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:23.59+00:00","url":"https://junglewise.ai/threats/cve-2026-67631-microsoft-sql-server-heap-buffer-overflow"},{"cve":"CVE-2026-65669","cvss":9.6,"epss":0.0088,"slug":"cve-2026-65669-microsoft-sql-server-sql-injection-privilege-escalation","title":"Microsoft SQL Server SQL injection privilege escalation","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:14.893+00:00","url":"https://junglewise.ai/threats/cve-2026-65669-microsoft-sql-server-sql-injection-privilege-escalation"},{"cve":"CVE-2026-67636","cvss":9,"epss":0.0071,"slug":"cve-2026-67636-microsoft-sql-server-out-of-bounds-read-allows-remote-code","title":"Microsoft SQL Server out-of-bounds read allows remote code execution","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:23.893+00:00","url":"https://junglewise.ai/threats/cve-2026-67636-microsoft-sql-server-out-of-bounds-read-allows-remote-code"},{"cve":"CVE-2026-67378","cvss":9,"epss":0.0071,"slug":"cve-2026-67378-microsoft-sql-server-untrusted-pointer-dereference","title":"Microsoft SQL Server untrusted pointer dereference","severity":"critical","exploited":false,"published_at":"2026-09-08T18:18:21.207+00:00","url":"https://junglewise.ai/threats/cve-2026-67378-microsoft-sql-server-untrusted-pointer-dereference"},{"cve":"CVE-2026-77484","cvss":8.8,"epss":0.0169,"slug":"cve-2026-77484-microsoft-sql-server-unsafe-deserialization-remote-code-execution","title":"Microsoft SQL Server unsafe deserialization remote code execution","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:34.023+00:00","url":"https://junglewise.ai/threats/cve-2026-77484-microsoft-sql-server-unsafe-deserialization-remote-code-execution"},{"cve":"CVE-2026-67368","cvss":8.8,"epss":0.0102,"slug":"cve-2026-67368-microsoft-sql-server-improper-link-resolution-privilege","title":"Microsoft SQL Server improper link resolution privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-08T18:18:20.55+00:00","url":"https://junglewise.ai/threats/cve-2026-67368-microsoft-sql-server-improper-link-resolution-privilege"}],"generated_at":"2026-09-26T09:24:00.138874+00:00"}