CVE-2019-1068: Microsoft SQL Server
Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.
- Vendor
- Microsoft
- Product
- SQL Server
- Vulnerability
- Microsoft SQL Server Remote Code Execution Vulnerability
- Date added
- Aug 26, 2026
- CISA due date (U.S. federal agencies)
- Aug 29, 2026
- Known ransomware campaign use
- Unknown
- Weakness (CWE)
- –
References
This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.
Last updated: · Catalog version 2026.10.02