The first thing I would do is going to:
Site administration -> Users -> Permissions -> Capability overview
and check for the student role the status of the following capabilities:
View own grades (moodle/grade:view)
View grades of other users (moodle/grade:viewall)
See if there is something strange there, and if so go to the "Define roles" page in the site settings, and edit accordingly.