Ein Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2017, Microsoft SQL Server 2019 und Microsoft SQL Server 2022 ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Angriff durchzuführen.
[UPDATE] [hoch] Microsoft SQL Server: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-15 11:26 UTC
- Importiert: 2026-10-16 09:37 UTC
- CVSS: 8.8
- Quelle-ID:
cert_bund - uid_hash:
d62d7ce5f11a0180ef74c86fb0cb1476564e565b2678a23b8e6d08cd98744730
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.8 |
HIGH |
8.8 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
8.5 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
6.5 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
4.9 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
8.5 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
6.7 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
6.6 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
8.5 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7.7 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7.7 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7.5 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
5.3 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
6.4 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
5.3 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
7 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
6.7 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
8.8 |
2026-10-13 |
|||
HIGH |
8.8 |
MEDIUM |
4.9 |
2026-10-13 |
|||
HIGH |
8.8 |
HIGH |
8 |
2026-10-13 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |