Known Vulnerabilities for Sql Server 2025 by Microsoft
Listed below are 7 of the newest known vulnerabilities associated with "Sql Server 2025" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111252 json | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS par... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-110447 json | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as ... | Not Provided | 2026-10-14 | 2026-10-24 |
| CVE-2026-109603 json | Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF ... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-106218 json | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-101878 json | Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalI... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-93581 json | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, in... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-78355 json | A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to referenc... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-78205 json | BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-loca... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-77680 json | An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. ... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2026-69263 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for C... | Not Provided | 2026-08-04 | 2026-08-04 |