CVE-2019-1068: microsoft sql_server, microsoft sql_server_2016, microsoft sql_server_2017

CVSS 8.8 (high) · listed as exploited by CISA since 2026-08-26 · published 2019-07-15

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

Affected products (NVD): microsoft sql_server, microsoft sql_server_2016, microsoft sql_server_2017

Fixed in (NVD): 13.0.4259.0, 13.0.4604.0, 13.0.5101.9, 13.0.5366.0, 14.0.2027.2, 14.0.3192.2

Weakness: CWE-20

Source: NVD CVE-2019-1068

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1068

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.