SQL Server 2016 vulnerabilities
2 advisories affect Microsoft SQL Server 2016, 2 already exploited by attackers. Latest: August 26, 2026.
Running SQL Server 2016 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on SQL Server 2016 alerts
Turn on SQL Server 2016 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Microsoft SQL Server Remote Code Execution Vulnerability CVE-2019-1068 · August 26, 2026 | High 8.8 Exploited | from 13.0.4001.0 to before 13.0.4259.0; from 13.0.4411.0 to before 13.0.4604.0; from 13.0.5026.0 to before 13.0.5101.9; from 13.0.5149.0 to before 13.0.5366.0 |
| Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CVE-2020-0618 · September 18, 2024 | High 8.8 Exploited | 2016 SP2 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other SQL Server versions: 2014