Microsoft Sql Server 2022 For X64 Based Systems Cu 25
Monthly
Privilege elevation in Microsoft SQL Server (2016 SP3 through 2025) allows an authenticated attacker to inject crafted SQL commands over the network and gain higher database privileges (CVSS 8.8). The flaw is a classic improper neutralization of special elements (CWE-89) reachable by any principal already holding low-level database access. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, though a vendor patch is available.
Privilege escalation via external file path control in Microsoft SQL Server affects versions 2016 through 2025, exploitable by any low-privilege authenticated SQL Server user. CWE-73 (External Control of File Name or Path) allows an authorized attacker to supply or manipulate file path parameters - likely through SQL operations such as BULK INSERT, BACKUP/RESTORE, or FILESTREAM commands - to escape intended access boundaries and elevate local operating system or SQL Server privileges. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; however, the SSVC framework rates Technical Impact as total, indicating full system compromise is achievable upon successful exploitation. The EPSS score of 0.24% (15th percentile) reflects low current exploitation probability.
Remote code execution in Microsoft SQL Server (2016 SP3 through 2025) arises from unsafe deserialization of untrusted data (CWE-502), letting an attacker who can reach the database over the network run arbitrary code in the SQL Server process context. Microsoft rates it critical (CVSS 9.8) and has shipped fixes across all supported branches; there is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none. EPSS is modest at 1.29% (67th percentile), consistent with a serious-but-not-yet-exploited server-side flaw.
SQL injection in Microsoft SQL Server (versions 2016 through 2025) enables an authenticated attacker to escalate privileges on the database server. The flaw, tracked as CWE-89, exists within the SQL Server engine's handling of user-supplied SQL input, allowing insufficient neutralization to be leveraged for privilege elevation. Publicly available exploit code exists (GitHub gist), though CISA has not yet added this to the KEV catalog and SSVC indicates no confirmed active exploitation; EPSS sits at 0.57% (44th percentile), suggesting low but non-trivial opportunistic exploitation risk.
Privilege elevation in Microsoft SQL Server (2016 SP3 through 2025) allows an authenticated attacker to inject crafted SQL commands over the network and gain higher database privileges (CVSS 8.8). The flaw is a classic improper neutralization of special elements (CWE-89) reachable by any principal already holding low-level database access. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, though a vendor patch is available.
Privilege escalation via external file path control in Microsoft SQL Server affects versions 2016 through 2025, exploitable by any low-privilege authenticated SQL Server user. CWE-73 (External Control of File Name or Path) allows an authorized attacker to supply or manipulate file path parameters - likely through SQL operations such as BULK INSERT, BACKUP/RESTORE, or FILESTREAM commands - to escape intended access boundaries and elevate local operating system or SQL Server privileges. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; however, the SSVC framework rates Technical Impact as total, indicating full system compromise is achievable upon successful exploitation. The EPSS score of 0.24% (15th percentile) reflects low current exploitation probability.
Remote code execution in Microsoft SQL Server (2016 SP3 through 2025) arises from unsafe deserialization of untrusted data (CWE-502), letting an attacker who can reach the database over the network run arbitrary code in the SQL Server process context. Microsoft rates it critical (CVSS 9.8) and has shipped fixes across all supported branches; there is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none. EPSS is modest at 1.29% (67th percentile), consistent with a serious-but-not-yet-exploited server-side flaw.
SQL injection in Microsoft SQL Server (versions 2016 through 2025) enables an authenticated attacker to escalate privileges on the database server. The flaw, tracked as CWE-89, exists within the SQL Server engine's handling of user-supplied SQL input, allowing insufficient neutralization to be leveraged for privilege elevation. Publicly available exploit code exists (GitHub gist), though CISA has not yet added this to the KEV catalog and SSVC indicates no confirmed active exploitation; EPSS sits at 0.57% (44th percentile), suggesting low but non-trivial opportunistic exploitation risk.