EXPOSURES › CVE-2019-1068
CVE-2019-1068
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unpatched remote code execution flaw in Microsoft SQL Server allowed attackers to execute arbitrary code as the database engine service account.
This unpatched RCE vulnerability in Microsoft SQL Server enabled attackers to execute code with elevated privileges, directly impacting DIB organizations relying on SQL Server for sensitive data. The flaw was actively exploited in the wild, demonstrating the severe risk of neglecting known CVEs. DIB orgs must ensure all SQL Server instances are patched and monitored for exploitation attempts.
Shame score — A known, unpatched RCE vulnerability was actively exploited in the wild, representing a severe negligence failure with high avoidability and significant compliance impact.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |