September 20, 2026

CVE Watchtower

← Back to CVE List

CVE-2019-1068NVD

Description

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
Severity Level
HIGH (8.8)
Published Date
15/07/2019
Last Modified
27/08/2026
Exploitation Status
????
EPSS Score
52.85% (percentile 98.9%)

CVSS Base Metrics

CVSS v3 (3.1)
HIGH 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-20

Affected & Patched Versions

ProductAffected VersionsPatched Version
microsoft sql server2014N/A
microsoft sql server2014N/A
microsoft sql server 2016>= 13.0.4001.0, < 13.0.4259.013.0.4259.0
microsoft sql server 2016>= 13.0.4411.0, < 13.0.4604.013.0.4604.0
microsoft sql server 2016>= 13.0.5026.0, < 13.0.5101.913.0.5101.9
microsoft sql server 2016>= 13.0.5149.0, < 13.0.5366.013.0.5366.0
microsoft sql server 2017>= 14.0.1000.169, < 14.0.2027.214.0.2027.2
microsoft sql server 2017>= 14.0.3006.16, < 14.0.3192.214.0.3192.2
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.

References