Browse CVEs

HIGH 7.8 CVE-2026-65673 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to… Entra Connect No fix yet Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-47295 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6500.1 / 13.0.7095.1+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47296 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6500.1 / 13.0.7095.1+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-32176 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6485.1 / 13.0.7080.1+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-32167 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6485.1 / 13.0.7080.1+ Fix from $1,9502026-04-14 HIGH 8.8 CVE-2026-26116 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6480.4 / 13.0.7075.5+ Fix from $1,9502026-03-10 HIGH 8.8 CVE-2026-20947EPSS 19% Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19127.20442+ Fix from $1,9502026-01-13 HIGH 8.8 CVE-2025-59499 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6475.1 / 13.0.7070.1+ Fix from $1,9502025-11-11 HIGH 8.8 CVE-2025-59213 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attack… Configuration Manager 2403 5.00.9128.1035 / 5.00.9132.1029+ Fix from $1,9502025-10-14 MEDIUM 6.8 CVE-2025-55320 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker… Configuration Manager 2403 5.00.9128.1035 / 5.00.9132.1029+ Fix from $1,6002025-10-14 HIGH 8.8 CVE-2025-53727 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6465.1 / 13.0.7060.1+ Fix from $1,9502025-08-12 HIGH 8.8 CVE-2025-49759 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6465.1 / 13.0.7060.1+ Fix from $1,9502025-08-12 HIGH 8.8 CVE-2025-47954 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2022 16.0.1145.1 / 16.0.4210.1+ Fix from $1,9502025-08-12 HIGH 8.0 CVE-2025-47178 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker… Configuration Manager 2503 5.00.9135.1003+ Fix from $1,9502025-07-08 HIGH 8.8 CVE-2025-47172 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Enterprise Server after 16.0.18526.20396 Fix from $1,9502025-06-10 CRITICAL 9.8 CVE-2024-43468 KEVEPSS 61% Microsoft Configuration Manager Remote Code Execution Vulnerability Configuration Manager 2403 No fix yet Fix from $2,3002024-10-08 HIGH 8.8 CVE-2022-34700 Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability Dynamics 365 No fix yet Fix from $1,9502022-09-13 CRITICAL 10.0 CVE-2021-42311 Microsoft Defender for IoT Remote Code Execution Vulnerability Defender For Iot 10.5.2+ Fix from $2,3002021-12-15 CRITICAL 10.0 CVE-2021-42313 Microsoft Defender for IoT Remote Code Execution Vulnerability Defender For Iot 10.5.2+ Fix from $2,3002021-12-15 HIGH 8.8 CVE-2021-41365 Microsoft Defender for IoT Remote Code Execution Vulnerability Defender For Iot 10.5.2+ Fix from $1,9502021-12-15 HIGH 8.8 CVE-2021-1636EPSS 6% Microsoft SQL Elevation of Privilege Vulnerability Sql Server No fix yet Fix from $1,9502021-01-12