Microsoft product
SQL Server Alert ← All Microsoft products
No CISA KEV deadline is open. CISA last added a SQL Server CVE on 26 Aug.
Tracked since 10 Mar · latest article Wed 14 Oct · RSS
CVE Product Added Due · federal deadline
Deadlines passed
CVE-2019-1068 SQL Server 26 Aug Ransomware: Unknown · 9 articles CVE-2020-0618 not in CyberSIXT coverage SQL Server 18 Sep 2024 Ransomware: Known · 0 articles 22 articles from 13 outlets since 10 Mar; the latest 12 days ago.
SQL Server: coverage over time 22 articles from 13 outlets. First report 10 Mar by SANS ISC. Busiest week: 9 articles, week of 24 Aug. 0 in the last 7 days.
May Jul Sep 10 Feb Now 22 per week First report SANS ISC · 10 Mar Latest Security Affairs · 12 days ago SQL Server: coverage over time 22 articles from 13 outlets. First report 10 Mar by SANS ISC. Busiest week: 9 articles, week of 24 Aug. 0 in the last 7 days.
Apr May Jun Jul Aug Sep 10 Feb Now 22 per week First report SANS ISC · 10 Mar Added to CISA KEV · CVE-2019-1068 SQL Server
Show as table SQL Server: articles Published (UTC) Outlet Headline Wed 14 Oct · 14:37 UTC Security Affairs Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk Tue 13 Oct · 23:01 UTC Dark Reading Microsoft patches actively exploited Windows flaw that bypasses security checks Tue 13 Oct · 21:13 UTC thezdi.com Adobe and Microsoft Patch Thousands of Flaws in Record Update Fri 28 Aug · 09:40 UTC Security Affairs CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list. Fri 28 Aug · 08:00 UTC SecurityOnline Windows 11 26H2 Enters Release Preview Channel Thu 27 Aug · 11:11 UTC Infosecurity CISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs. Thu 27 Aug · 09:31 UTC SecurityOnline Six Active Exploits Emerge as Microsoft Rebrands to AI Roadmap Thu 27 Aug · 09:31 UTC SecurityOnline uBlock Origin v1.74.0 Chrome release to be delisted amid CVEs Thu 27 Aug · 09:30 UTC SecurityOnline WeedHack malware steals data from over 116,000 Minecraft gamers Thu 27 Aug · 03:47 UTC SecurityOnline CISA warns of active exploits in NetScaler, SQL Server, Linux Thu 27 Aug · 02:51 UTC CISA CISA adds Microsoft SQL flaw to Known Exploited Vulnerabilities list Wed 26 Aug · 23:22 UTC CISA CISA flags Microsoft SQL Server RCE flaw CVE-2019-1068 for urgent patch Tue 14 Apr · 22:01 UTC Krebs on Security Microsoft fixes 167 flaws, patches SharePoint zero day exploit Wed 11 Mar · 11:43 UTC SOCRadar March 2026 Patch Tuesday: 83 Vulnerabilities, Two Publicly Disclosed Zero-Days Wed 11 Mar · 11:13 UTC Malwarebytes March 2026 Patch Tuesday fixes two zero-day vulnerabilities Wed 11 Mar · 09:42 UTC The Hacker News Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days Wed 11 Mar · 09:42 UTC Infosecurity Microsoft Fixes Two Publicly Disclosed Zero-Days Wed 11 Mar · 01:05 UTC Krebs on Security Microsoft Patch Tuesday, March 2026 Edition Wed 11 Mar · 00:04 UTC Security Affairs Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs Tue 10 Mar · 22:03 UTC Rapid7 Patch Tuesday - March 2026 Tue 10 Mar · 19:31 UTC SecurityWeek Microsoft Patches 83 Vulnerabilities Tue 10 Mar · 19:01 UTC SANS ISC Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)
Who reported 13 outlets, last 12 months
5 3 2 2 2 1 7 See the full timeline 14 Oct Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk Security Affairs 13 Oct Microsoft patches actively exploited Windows flaw that bypasses security checks Dark Reading 13 Oct Adobe and Microsoft Patch Thousands of Flaws in Record Update thezdi.com 28 Aug CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list. Security Affairs 28 Aug Windows 11 26H2 Enters Release Preview Channel SecurityOnline 27 Aug CISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs. Infosecurity 27 Aug Six Active Exploits Emerge as Microsoft Rebrands to AI Roadmap SecurityOnline 27 Aug uBlock Origin v1.74.0 Chrome release to be delisted amid CVEs SecurityOnline 27 Aug WeedHack malware steals data from over 116,000 Minecraft gamers SecurityOnline 27 Aug CISA warns of active exploits in NetScaler, SQL Server, Linux SecurityOnline
All CVEs in coverage 4 Exploited EPSS CVSS Newest CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability CVSS 8.8 High Exploited 57% EPSS 9 articles CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability CVSS Unrated – Not in KEV 2.1% EPSS 9 articles CVE-2026-33120 Microsoft SQL Server 2022 (GDR) vulnerability CVSS 8.8 High – Not in KEV 0.9% EPSS 1 article CVE-2026-65674 Microsoft SQL Server 2019 (GDR) vulnerability CVSS 8.8 High – Not in KEV 0.9% EPSS 3 articles How these numbers are made CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.