SQL Server 2025
66 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for SQL Server 2025. Use it to gauge the current risk picture and drill into individual advisories.
SQL Server 2025 CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 3 |
| 2026-04 | 3 |
| 2026-05 | 1 |
| 2026-06 | 0 |
| 2026-07 | 7 |
| 2026-08 | 0 |
| 2026-09 | 51 |
Severity
How the 66 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical6
- High35
- Medium25
Latest CVEs
The 15 most recently published vulnerabilities affecting SQL Server 2025.
- CVE-2026-77481Microsoft SQL Server Remote Code Execution Vulnerability8.8
- CVE-2026-67645Microsoft SQL Server Information Disclosure Vulnerability6.5
- CVE-2026-66819Microsoft SQL Server Elevation of Privilege Vulnerability8.8
- CVE-2026-67369Microsoft SQL Server Information Disclosure Vulnerability6.5
- CVE-2026-77488Microsoft SQL Server Information Disclosure Vulnerability5.5
- CVE-2026-77485SQL Server Elevation of Privilege Vulnerability7.0
- CVE-2026-77487SQL Server Elevation of Privilege Vulnerability8.8
- CVE-2026-77484Microsoft SQL Server Remote Code Execution Vulnerability8.8
- CVE-2026-77483SQL Server Elevation of Privilege Vulnerability8.8
- CVE-2026-77480SQL Server Elevation of Privilege Vulnerability8.8
- CVE-2026-73028SQL Server Elevation of Privilege Vulnerability8.8
- CVE-2026-68780Microsoft SQL Server Information Disclosure Vulnerability6.5
- CVE-2026-68779Microsoft SQL Server Information Disclosure Vulnerability6.5
- CVE-2026-68778Microsoft SQL Server Information Disclosure Vulnerability6.5
- CVE-2026-68777Microsoft SQL Server Information Disclosure Vulnerability6.5
Product grouping is registry-driven, with AI assist and human review. How it works