- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
SQL Server Remote Code Execution Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Default status
Unknown
Microsoft SQL Server 2016 Service Pack 3 (GDR) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 13.0.0 | affected | custom | 13.0.6490.1 | Unavailable | None listed |
|---|
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Default status
Unknown
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 13.0.0 | affected | custom | 13.0.7085.1 | Unavailable | None listed |
|---|
Microsoft SQL Server 2017 (CU 31)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2017 (CU 31)
- Default status
Unknown
Microsoft SQL Server 2017 (CU 31) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 14.0.0 | affected | custom | 14.0.3530.2 | Unavailable | None listed |
|---|
Microsoft SQL Server 2017 (GDR)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2017 (GDR)
- Default status
Unknown
Microsoft SQL Server 2017 (GDR) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 14.0.0 | affected | custom | 14.0.2110.2 | Unavailable | None listed |
|---|
Microsoft SQL Server 2019 (CU 32)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2019 (CU 32)
- Default status
Unknown
Microsoft SQL Server 2019 (CU 32) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 15.0.0.0 | affected | custom | 15.0.4470.1 | Unavailable | None listed |
|---|
Microsoft SQL Server 2019 (GDR)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2019 (GDR)
- Default status
Unknown
Microsoft SQL Server 2019 (GDR) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 15.0.0 | affected | custom | 15.0.2170.1 | Unavailable | None listed |
|---|
Microsoft SQL Server 2022 (GDR)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2022 (GDR)
- Default status
Unknown
Microsoft SQL Server 2022 (GDR) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 16.0.0 | affected | custom | 16.0.1180.1 | Unavailable | None listed |
|---|
Microsoft SQL Server 2022 for x64-based Systems (CU 24)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2022 for x64-based Systems (CU 24)
- Default status
Unknown
Microsoft SQL Server 2022 for x64-based Systems (CU 24) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 16.0.0.0 | affected | custom | 16.0.4252.3 | Unavailable | None listed |
|---|
Microsoft SQL Server 2025 (CU 4)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2025 (CU 4)
- Platforms
- Unknown
- Default status
Unknown
Microsoft SQL Server 2025 (CU 4) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 17.0.4040.1 | affected | custom | 17.0.4040.1 | Unavailable | None listed |
|---|
Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Default status
Unknown
Microsoft SQL Server 2025 for x64-based Systems (GDR) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 17.0.1050.2 | affected | custom | 17.0.1115.1 | Unavailable | None listed |
|---|