FAIL › dossier
sql server 2017
PRODUCT· dossier confidence 40%
Microsoft SQL Server 2017 is an enterprise database product from Microsoft that suffered a critical cluster of remote code execution, buffer overflow, and deserialization vulnerabilities in September 2026, requiring immediate patching and architectural review.
PROFILE
CategoryEnterprise DatabaseWhat they doMicrosoft SQL Server 2017 is an enterprise relational database management system developed by Microsoft.Ownershippublic
Websitehttps://www.microsoft.com/sql-server ↗
SECURITY POSTURE
The product suffered a critical cluster of remote code execution, buffer overflow, and deserialization vulnerabilities in September 2026, requiring immediate patching and architectural review.
Notable failures
- CVE-2026-67631: Heap-based buffer overflow allowing remote code execution
- CVE-2026-54117: Deserialization of untrusted data allowing unauthorized access
- CVE-2026-54118: Deserialization of untrusted data allowing unauthorized access
- CVE-2024-37341: Elevation of privilege vulnerability
- CVE-2024-37980: Elevation of privilege vulnerability
Patterns: repeated critical RCE and buffer overflow vulnerabilities in September 2026; multiple deserialization of untrusted data flaws discovered in September 2026; elevation of privilege vulnerabilities in September 2024
FAILURE HISTORY · 5
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-08 | CVE-2026-67631 | critical | A heap-based buffer overflow in Microsoft SQL Server allows remote code execution over a network. |
| 2026-07-14 | CVE-2026-54117 | critical | CVE-2026-54117: Deserialization of untrusted data in SQL Server allows an unauthorized attacker |
| 2026-07-14 | CVE-2026-54118 | critical | CVE-2026-54118: Deserialization of untrusted data in SQL Server allows an unauthorized attacker |
| 2024-09-10 | CVE-2024-37341 | high | CVE-2024-37341: Microsoft SQL Server Elevation of Privilege Vulnerability |
| 2024-09-10 | CVE-2024-37980 | high | CVE-2024-37980: Microsoft SQL Server Elevation of Privilege Vulnerability |
DOSSIER SOURCES
- Microsoft (MSFT) Company Profile & Description - Stock Analysis · stockanalysis.com
- Microsoft Corporation (MSFT) Company Profile - Business Overview ... · stocknear.com
- Microsoft Corporation, MSFT:WSE profile - FT.com · markets.ft.com
- MICROSOFT CORP (MSFT, US5949181045) - Company Profile · financialdata.net
- Sql Server 2017 CVEs and Security Vulnerabilities - OpenCVE · app.opencve.io
- SQL Server Security Updates September 2026 | DBA Services · www.dbaservices.com.au
Open questions: Exact founding date of SQL Server 2017 · Specific HQ location for Microsoft SQL Server development
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-20 04:20:03.841483+00:00