coldbraid

CVE-2019-1068 Microsoft Microsoft SQL Server 2014 Service…

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

CVSS
8.8 High
EPSS
57%
Percentile
99
Published
2019-07-15
Force
10 of 12
Public PoC
1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-20

On CISA’s exploited list

Microsoft SQL Server Remote Code Execution Vulnerability

Added
2026-08-26
Federal patch deadline
2026-08-29
Ransomware use
not known