| CVE-2026-47295 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-55002 | ÉLEVÉE8.8 | External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-54118 | CRITIQUE9.8 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-54117 | CRITIQUE9.8 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-47296 | ÉLEVÉE7.5 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-40370 | ÉLEVÉE8.8 | External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-33120 | ÉLEVÉE8.8 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. | 14/04/2026 |
| CVE-2026-32176 | ÉLEVÉE7.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | 14/04/2026 |
| CVE-2026-32167 | ÉLEVÉE7.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | 14/04/2026 |
| CVE-2026-26116 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 10/03/2026 |
| CVE-2026-26115 | ÉLEVÉE8.8 | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. | 10/03/2026 |
| CVE-2026-21262 | ÉLEVÉE8.8 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 10/03/2026 |
| CVE-2025-59499 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 11/11/2025 |
| CVE-2025-55227 | ÉLEVÉE8.8 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 09/09/2025 |
| CVE-2025-47997 | MOYENNE5.3 | Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network. | 09/09/2025 |
| CVE-2025-53727 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 12/08/2025 |
| CVE-2025-49759 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 12/08/2025 |
| CVE-2025-49758 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 12/08/2025 |
| CVE-2025-24999 | ÉLEVÉE8.8 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 12/08/2025 |
| CVE-2025-49719 | ÉLEVÉE7.5 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. | 08/07/2025 |