SQL Server 2014 vulnerabilities

2 advisories affect Microsoft SQL Server 2014, 2 already exploited by attackers. Latest: August 26, 2026.

Running SQL Server 2014 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on SQL Server 2014 alerts

Vulnerability	Severity	Affected versions
Microsoft SQL Server Remote Code Execution Vulnerability CVE-2019-1068 · August 26, 2026	High 8.8 Exploited	2014 SP2, 2014 SP3
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CVE-2020-0618 · September 18, 2024	High 8.8 Exploited	2014 SP3

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other SQL Server versions: 2016