{
  "cveId": "CVE-2019-1068",
  "url": "https://patchblox.com/security/cve/CVE-2019-1068",
  "summary": "CVE-2019-1068 is fixed in 14 products on 1 platform, first by KB4505419, released July 9, 2019. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on August 26, 2026. Patch Radar priority: Patch now.",
  "title": "Microsoft SQL Server Remote Code Execution Vulnerability",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execute code in the context of the SQL Server Database Engine service account.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an authenticated attacker would need to submit a specially crafted query to an affected SQL server.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by modifying how the Microsoft SQL Server Database Engine handles the processing of functions.\u003C/p\u003E",
  "published": "2019-07-09T12:00:00Z",
  "severity": "Important",
  "epss": 0.57273,
  "epssPercentile": 0.99079,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": false,
  "disclosed": true,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "kev": {
    "added": "2026-08-26T00:00:00Z",
    "due": "2026-08-29T00:00:00Z",
    "ransomware": false,
    "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201CForensics Triage Requirements\u201D (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines."
  },
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU)",
      "fixedVersion": "",
      "fix": "KB4505419",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505419",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB4505217",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505217",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (CU)",
      "fixedVersion": "",
      "fix": "KB4505419",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505419",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB4505217",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505217",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)",
      "fixedVersion": "",
      "fix": "KB4505422",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505422",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB4505218",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505218",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)",
      "fixedVersion": "",
      "fix": "KB4505422",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505422",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB4505218",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505218",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (CU)",
      "fixedVersion": "",
      "fix": "KB4505221",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505221",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)",
      "fixedVersion": "",
      "fix": "KB4505219",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505219",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)",
      "fixedVersion": "",
      "fix": "KB4505222",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505222",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)",
      "fixedVersion": "",
      "fix": "KB4505220",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505220",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2017 for x64-based Systems (CU)",
      "fixedVersion": "",
      "fix": "KB4505225",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505225",
      "released": "2019-07-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2017 for x64-based Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB4505224",
      "url": "https://patchblox.com/security/fix/microsoft/kb4505224",
      "released": "2019-07-09T12:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}