CVE-2019-1068

No fix known ExploitedEPSS 57%CVSS 8.8

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

Published 2019-07-15 · In CISA KEV since 2026-08-26 · CVE record · OSV

Products: Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR), Microsoft SQL Server, Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR), Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR), Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU), Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR), Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)