{"id":"CVE-2019-1068","aliases":["EUVD-2019-9650","GHSA-62pw-5pr4-ghr5"],"status":"published","title":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles...","description":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.57273,"percentile":0.9908,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2019-07-15T18:56:20Z","modified":"2026-08-27T04:16:38Z","kev":{"date_added":"2026-08-26","due_date":"2026-08-29","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2026-08-26"},{"source":"kev","since":"2026-08-26"}],"exploits":[{"source":"pocgithub","id":"Vulnerability-Playground/CVE-2019-1068","title":"Vulnerability-Playground/CVE-2019-1068","date":"2021-02-04","url":"https://github.com/Vulnerability-Playground/CVE-2019-1068"}],"products":[{"vendor":"microsoft","product":"microsoft sql server"},{"vendor":"microsoft","product":"microsoft sql server 2014 service pack 2 for 32-bit systems (gdr)"},{"vendor":"microsoft","product":"microsoft sql server 2014 service pack 2 for x64-based systems (gdr)"},{"vendor":"microsoft","product":"microsoft sql server 2014 service pack 3 for 32-bit systems (cu)"},{"vendor":"microsoft","product":"microsoft sql server 2014 service pack 3 for 32-bit systems (gdr)"},{"vendor":"microsoft","product":"microsoft sql server 2014 service pack 3 for x64-based systems (cu)"},{"vendor":"microsoft","product":"microsoft sql server 2014 service pack 3 for x64-based systems (gdr)"},{"vendor":"microsoft","product":"microsoft sql server 2016 for x64-based systems service pack 1 (gdr)"},{"vendor":"microsoft","product":"microsoft sql server 2016 for x64-based systems service pack 2 (gdr)"},{"vendor":"microsoft","product":"microsoft sql server 2017 for x64-based systems (gdr)"},{"vendor":"microsoft","product":"sql server"},{"vendor":"microsoft","product":"sql_server"},{"vendor":"microsoft","product":"sql_server_2016"},{"vendor":"microsoft","product":"sql_server_2017"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1068","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1068"},{"url":"https://github.com/advisories/GHSA-62pw-5pr4-ghr5"}],"sources":{"cve":[{"id":"CVE-2019-1068","description":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","status":"published","published":"2019-07-15T18:56:20Z","modified":"2026-08-27T03:57:25.483Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:20:25.661187Z"}],"euvd":[{"id":"EUVD-2019-9650","description":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","status":"published","published":"2019-07-15T18:56:20Z","modified":"2026-08-27T03:57:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2026-08-26","updated_at":"2026-11-02T18:01:28.934147Z"}],"ghsa":[{"id":"GHSA-62pw-5pr4-ghr5","title":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles...","description":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","status":"published","published":"2022-05-24T16:50:19Z","modified":"2026-08-26T18:31:30Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:10:59.276943Z"}],"kev":[{"id":"CVE-2019-1068","title":"Microsoft SQL Server Remote Code Execution Vulnerability","description":"Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.","kev":{"date_added":"2026-08-26","due_date":"2026-08-29","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2019-1068","description":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","status":"published","published":"2019-07-15T19:15:16.983Z","modified":"2026-08-27T04:16:38.583Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:19.195714Z"}]}}