sql_server_2017_for_x64-based_systems_cu31 vulnerabilities
CVEs whose affected-version data names the sql_server_2017_for_x64-based_systems_cu31 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
12 CVEsRSS
CVE-2026-96956High· 8.0Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-94520Medium· 4.9Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-94512High· 8.8Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-88089Medium· 6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-88085Medium· 6.4Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081High· 7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85888High· 7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85886High· 8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-70189Medium· 6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68883High· 8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67628Medium· 4.9Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67625High· 8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.