CVE-2019-1068 Microsoft Microsoft SQL Server 2014 Service…
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
- CVSS
- 8.8 High
- EPSS
- 57%
- Percentile
- 99
- Published
- 2019-07-15
- Force
- 10 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Microsoft SQL Server Remote Code Execution Vulnerability
- Added
- 2026-08-26
- Federal patch deadline
- 2026-08-29
- Ransomware use
- not known