这段英文描述的是 SQL Server 中的一个安全漏洞,核心含义是:由于身份验证机制较弱,经过身份验证的攻击者(即已获得一定权限的用户)可以通过网络通道提升自身的权限(通常指从普通用户提升为管理员或高权限用户)。 中文翻译: SQL Server 的身份验证机制存在缺陷,允许经过身份验证的攻击者通过网络提升权限。 词汇解析与翻译说明: Weak authentication:指身份验证过程不够严格或存在安全漏洞,容易绕过或篡改。 Authorized attacker:这里的“authorized”意味着攻击者已
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (CU 31) | 14.0.0< 14.0.3550.4 |
affected |
| Microsoft | Microsoft SQL Server 2017 (GDR) | 14.0.0< 14.0.2130.4 |
affected |
| Microsoft | Microsoft SQL Server 2019 (CU 32) | 15.0.0.0< 15.0.4490.9 |
affected |
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0< 15.0.2190.7 |
affected |
| Microsoft | Microsoft SQL Server 2022 (CU 26) | 16.0.0.0< 16.0.4275.2 |
affected |
| Microsoft | Microsoft SQL Server 2022 (GDR) | 16.0.0< 16.0.1200.5 |
affected |
| Microsoft | Microsoft SQL Server 2025 (CU8) | 17.0.0.0< 17.0.4085.5 |
affected |
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) | 17.0.1050.2< 17.0.1135.8 |
affected |
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (CU 31) | 14.0.0 ~ 14.0.3550.4 | - |
|
| Microsoft | Microsoft SQL Server 2017 (GDR) | 14.0.0 ~ 14.0.2130.4 | - |
|
| Microsoft | Microsoft SQL Server 2019 (CU 32) | 15.0.0.0 ~ 15.0.4490.9 | - |
|
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 ~ 15.0.2190.7 | - |
|
| Microsoft | Microsoft SQL Server 2022 (CU 26) | 16.0.0.0 ~ 16.0.4275.2 | - |
|
| Microsoft | Microsoft SQL Server 2022 (GDR) | 16.0.0 ~ 16.0.1200.5 | - |
|
| Microsoft | Microsoft SQL Server 2025 (CU8) | 17.0.0.0 ~ 17.0.4085.5 | - |
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) | 17.0.1050.2 ~ 17.0.1135.8 | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2026-83941 | 9.9 CRITICAL | Entra ID Elevation of Privilege Vulnerability |
| CVE-2026-69525 | 9.8 CRITICAL | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69463 | 9.8 CRITICAL | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-73025 | 9.8 CRITICAL | Windows iSCSI Security Feature Bypass Vulnerability |
| CVE-2026-73010 | 9.8 CRITICAL | Microsoft Failover Cluster Remote Code Execution Vulnerability |
| CVE-2026-70296 | 9.8 CRITICAL | Windows Imaging Component Remote Code Execution Vulnerability |
| CVE-2026-69819 | 9.8 CRITICAL | RPC Runtime Library Remote Code Execution Vulnerability |
| CVE-2026-69715 | 9.8 CRITICAL | Windows Direct Show Remote Code Execution Vulnerability |
| CVE-2026-73009 | 9.8 CRITICAL | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-69590 | 9.8 CRITICAL | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-68839 | 9.8 CRITICAL | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability |
| CVE-2026-78445 | 9.8 CRITICAL | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
| CVE-2026-69768 | 9.8 CRITICAL | Windows RNDIS Remote Code Execution Vulnerability |
| CVE-2026-69491 | 9.8 CRITICAL | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-69431 | 9.8 CRITICAL | Telnet Client Remote Code Execution Vulnerability |
| CVE-2026-72979 | 9.8 CRITICAL | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69824 | 9.8 CRITICAL | Microsoft Standard XPS Remote Code Execution Vulnerability |
| CVE-2026-69408 | 9.8 CRITICAL | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2026-69910 | 9.8 CRITICAL | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-78510 | 9.8 CRITICAL | Microsoft Word Remote Code Execution Vulnerability |
Showing top 20 of 966 CVEs. View all on vendor page → →
No comments yet