SQL Server vulnerabilities

3 known vulnerabilities in SQL Server from Microsoft. 3 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft SQL Server Reporting Services Remote Code Execution Exploited

  CVE-2020-0618Feb 11, 2020MicrosoftEPSS 99%

  A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

• 8.8 High severity

  Microsoft SQL Server Remote Code Execution Exploited

  CVE-2019-1068Jul 15, 2019MicrosoftEPSS 57.3%

  A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

• 8.8 High severity

  Microsoft Office MSCOMCTL.OCX Remote Code Execution Exploited

  CVE-2012-1856Aug 15, 2012MicrosoftEPSS 72%

  The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 S