A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
Product
Microsoft sql server 2016 vulnerabilities
101 published CVES affecting Microsoft sql server 2016, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 101
- Critical
- 4
- High
- 94
- Medium
- 3
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Latest Microsoft sql server 2016 CVEs
Newest publication first · page 5 of 5
-
HighCVSS 8.8 EPSS 57.3% CISA KEV added 2026-08-26 Exploited in the wild
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.