{"id":"CVE-2019-1068","title":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","summary":"A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-20"],"vendor":"microsoft","product":"sql_server","affected":["sql_server = 2014","sql_server = 2016","sql_server = 2017"],"published":"2019-07-15","updated":"2026-08-26","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-1068","references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068","label":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.52845,"epssPercentile":0.9895,"ingestedAt":"2026-08-26T16:46:29.705Z","kev":true,"exploited":true,"kevDateAdded":"2026-08-26","kevDueDate":"2026-08-29","kevRansomware":false,"exploits":{"github":1,"githubRepos":["https://github.com/Vulnerability-Playground/CVE-2019-1068"],"checkedAt":"2026-09-21T15:23:40.171Z"},"exploitAvailable":true,"slug":"CVE-2019-1068","body":"## Overview\n\nA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.\n\n## Affected\n\n- `sql_server = 2014`\n- `sql_server = 2016`\n- `sql_server = 2017`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":84,"depthScoreParts":{"impact":48.4,"likelihood":10.6,"exploitation":25,"ransomware":0},"changes":[{"seq":4455,"id":"CVE-2019-1068","ts":1788887180851,"field":"exploit_available","old":"false","new":"true"},{"seq":3338,"id":"CVE-2019-1068","ts":1788886299817,"field":"exploit_available","old":"true","new":"false"},{"seq":2193,"id":"CVE-2019-1068","ts":1788882969520,"field":"exploit_available","old":"false","new":"true"},{"seq":1222,"id":"CVE-2019-1068","ts":1788882375529,"field":"exploit_available","old":"true","new":"false"},{"seq":336,"id":"CVE-2019-1068","ts":1788881816109,"field":"exploit_available","old":"false","new":"true"},{"seq":195,"id":"CVE-2019-1068","ts":1787863307488,"field":"epss","old":"0.44665","new":"0.52845"},{"seq":190,"id":"CVE-2019-1068","ts":1787776722730,"field":"exploited","old":"false","new":"true"},{"seq":189,"id":"CVE-2019-1068","ts":1787776722730,"field":"kev","old":"false","new":"true"}]}