SQL Server Management Studio vulnerabilities

2 known vulnerabilities in SQL Server Management Studio from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  SQL Server Management Studio 22: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-65669Sep 8, 2026Microsoft

  Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.

• 7.3 High severity

  SQL Server Management Studio 20.2: Uncontrolled Search Path Element

  CVE-2025-29803Apr 12, 2025Microsoft

  Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.