SQL Server vulnerabilities

An out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

An untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.

A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.

A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. An attacker could exploit this to disrupt service availability.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. An attacker could exploit this to run arbitrary code in the context of the SQL Server process.

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. An attacker could exploit this to access sensitive data.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability resides in the database component and requires prior access to the system.

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. Resource exhaustion may render the service unavailable.

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

A heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

A use-after-free vulnerability in SQL Server allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. The vulnerability affects the database component and requires valid credentials.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. The vulnerability requires system access with valid credentials.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

SQL Server has improper access control that allows an authorized attacker to elevate privileges over a network.

SQL Server has an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code over a network.

SQL Server has a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

SQL Server has a deserialization of untrusted data vulnerability that allows an authorized attacker to execute code over a network.

SQL Server has weak authentication that allows an authorized attacker to elevate privileges over a network.

SQL Server has a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network.

SQL Server has a heap-based buffer overflow vulnerability that allows an authorized attacker to execute code over a network.

SQL Server has insufficient granularity of access control that allows an authorized attacker to elevate privileges over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

A vulnerability in SQL Server involves a heap-based buffer overflow. An authorized attacker could exploit this to execute code over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.