Sql Server Management Studio (Microsoft) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 67 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.
CVEs of Sql Server Management Studio
- CVE-2026-65669 - CVSS 9.6 (critical), 2026-09-08: Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate…
- CVE-2025-29803 - CVSS 7.3 (high), 2025-04-12: Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges…
- CVE-2020-1455 - CVSS 5.5 (medium), 2020-08-17: A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the…
- CVE-2019-1376 - CVSS 6.5 (medium), 2019-10-10: An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server…
- CVE-2019-1313 - CVSS 6.5 (medium), 2019-10-10: An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server…
- CVE-2018-8532 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to…
- CVE-2018-8527 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an…
- CVE-2018-8533 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to…
