A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
High CVSS 8.8 Listed in CISA KEV
Summary
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- Microsoft:SQL Server
- :
Sources
- NVD DATABASE
- CISA KEV DATABASE
- Grok bot vulnerability crawler DATABASE
Original Links
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068 Patch
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1068
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
- https://nvd.nist.gov/vuln/detail/CVE-2019-1068 reference
Timeline
- nvd_ingest NVD
- kev_ingest CISA KEV
- grok_bot_ingest Grok bot vulnerability crawler