Sql Server 2022
Monthly
Heap-based buffer overflow in Microsoft SQL Server 2022 enables an authenticated low-privileged network attacker to execute arbitrary code on the database server host. Both the GDR and CU 26 servicing branches of SQL Server 2022 are affected, with Microsoft having released fixed builds in both channels. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity and full network reachability make this a high-priority patching target for any organization running SQL Server 2022.
Privilege escalation in Microsoft SQL Server (2017 through 2025) allows a low-privileged authenticated network attacker to gain full administrative control via improper access control enforcement. The vulnerability spans four major SQL Server release trains - 2017, 2019, 2022, and 2025 - including both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches. No public exploit code has been identified at time of analysis, but the low attack complexity and broad affected surface across enterprise SQL Server deployments make this a meaningful priority for patching.
Local privilege escalation in Microsoft SQL Server affects versions 2017 through 2025 via a use-after-free memory corruption flaw exploitable by an authenticated low-privilege user. An attacker with existing local access and SQL Server login credentials can trigger the UAF condition to achieve full C:H/I:H/A:H impact, effectively gaining elevated privileges on the host. No public exploit code has been identified at time of analysis, and Microsoft has released patches across all affected CU and GDR servicing channels.
Remote code execution in Microsoft SQL Server 2019, 2022, and 2025 is achievable by an authenticated low-privilege attacker via deserialization of untrusted data (CWE-502) delivered over the network. The flaw covers multiple build tracks across three major SQL Server versions, with full confidentiality, integrity, and availability impact on the database host. Microsoft has released patches for all affected versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in Microsoft SQL Server allows a network-authenticated low-privileged attacker to elevate to higher database roles via a weak authentication mechanism (CWE-1390). Affected releases span SQL Server 2017 through 2025 across both General Distribution Release (GDR) and Cumulative Update (CU) servicing branches. Microsoft has released patched builds for all affected versions; no public exploit or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft SQL Server (versions 2017 through 2025) enables any authenticated network attacker holding a low-privileged SQL Server account to achieve full remote code execution on the database host. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms exploitation requires no user interaction and is low-complexity once a valid login is held, with complete confidentiality, integrity, and availability impact. No public exploit identified at time of analysis; Microsoft has released patches across all affected major release branches including both CU and GDR servicing tracks.
Privilege escalation in Microsoft SQL Server allows a low-privileged, authenticated network attacker to elevate access rights and achieve full control over database confidentiality, integrity, and availability. The root cause is CWE-1220 (Insufficient Granularity of Access Control), meaning SQL Server fails to enforce sufficiently fine-grained permission boundaries between privilege tiers, permitting lateral movement to higher roles without authorization. All active major servicing branches are affected - SQL Server 2017, 2019, 2022, and 2025 - and Microsoft has released patches across both Cumulative Update and GDR servicing tracks. No public exploit or active exploitation (KEV) has been identified at time of analysis.
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to elevate to higher database or system-level permissions over a standard network connection. The flaw, rooted in CWE-284 (Improper Access Control), requires only a valid low-privilege SQL Server login and network reachability to the instance - no special configuration or user interaction is needed. Microsoft has released patches across all affected cumulative update and GDR servicing branches; no public exploit code or active exploitation has been identified at time of analysis.
Heap-based buffer overflow in Microsoft SQL Server allows a low-privileged local attacker to execute arbitrary code with full confidentiality, integrity, and availability impact on the SQL Server host. Affected versions span four major release generations - SQL Server 2017 through 2025 - across both Cumulative Update and GDR servicing tracks, indicating a systemic code path defect rather than an isolated regression. No public exploit code or CISA KEV listing exists at time of analysis; vendor-released patches are available for all affected builds.
Heap-based buffer overflow in Microsoft SQL Server 2017 through 2025 enables an authenticated network attacker with low-level database credentials to achieve full remote code execution on the SQL Server host. The CVSS 8.8 (PR:L) rating reflects that any valid SQL Server login - not just a DBA - can trigger the overflow, making this dangerous in environments with broad user bases or shared credentials. No public exploit has been identified at time of analysis, but patches are available from Microsoft across all affected major versions.
Heap-based buffer overflow in Microsoft SQL Server (2017 through 2025) enables network-reachable, low-privileged authenticated attackers to execute arbitrary code on the database server. With CVSS 8.8 (AV:N/AC:L/PR:L/UI:N), exploitation requires only a valid database login - no administrative privileges or user interaction - making this a credible lateral-movement vector in environments with reachable SQL Server instances. Vendor patches are available across all affected GDR and CU servicing tracks; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in the Microsoft SQL Server engine (SQL Server 2022 and SQL Server 2025 on x64) can let an attacker corrupt heap memory and potentially achieve code execution under the database service account over a network connection. Microsoft's own description frames the attacker as 'authorized,' meaning a valid SQL Server login or compromised database credentials plus network reachability to the engine are required, and our independent assessment scores the issue as CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H rather than the vendor-published 9.8 (AV:N/AC:L/PR:N/UI:N), which would imply fully unauthenticated remote code execution and contradicts the stated authorization prerequisite. CISA's SSVC evaluation records no exploitation and marks the flaw non-automatable, and no public exploit code has been identified at time of analysis; EPSS is low at 0.83% (55th percentile), though the aggregate C:H/I:H/A:H impact makes prompt patching of exposed instances worthwhile.
Heap-based buffer overflow in Microsoft SQL Server 2017 through 2025 enables an authenticated low-privilege network attacker to execute arbitrary code on the database host. The vulnerability (CWE-122) resides in a network-reachable code path, requiring only valid SQL Server credentials - no elevated database roles or special configuration. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the full CIA impact and low attack complexity make this a high-priority patching target in enterprise environments.
Out-of-bounds read in Microsoft SQL Server 2019, 2022, and 2025 on x64 can, under specific memory conditions, be steered into remote code execution against the database engine. The vendor scores this 9.0 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), while our assessment rates it 9.0 under a more conservative vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) because the advisory's own 'authorized attacker' wording and Microsoft's history with SQL Server flaws indicate a valid database login is realistically required; high attack complexity (AC:H) further limits reliable exploitation to environments where SQL Server accepts connections from untrusted or semi-trusted network segments. There is no indication of active exploitation (not in CISA KEV; SSVC exploitation 'none'), no public exploit code identified at time of analysis, and EPSS is low at 0.47% (40th percentile), making this a patch-priority issue for exposed or multi-tenant SQL Server deployments rather than an emergency internet-wide threat; vendor-released patches are available.
Heap-based buffer overflow in Microsoft SQL Server 2017, 2019, 2022, and 2025 (x64) can be triggered over the network and, if exploited successfully, allows code execution in the context of the SQL Server engine process on the database host. Microsoft describes the attacker as 'authorized', and the assessed vector requires a valid authenticated session (PR:L, AC:H), which is stricter than the 9.8 unauthenticated headline score from the NVD entry; no public exploit code has been identified and EPSS is low at 0.63% (48th percentile), with CISA SSVC recording Exploitation: none and Automatable: no. Vendor patches are available, and only instances at or above the corrected build thresholds are protected.
Heap-based buffer overflow in Microsoft SQL Server enables a low-privileged authenticated attacker to remotely execute arbitrary code on the database server. All major active SQL Server branches are affected - 2017, 2019, 2022, and the newly released 2025 edition - across both Cumulative Update (CU) and General Distribution Release (GDR) servicing tracks. Microsoft has released build-specific patches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Use-after-free memory corruption in Microsoft SQL Server enables a network-authenticated low-privileged attacker to achieve arbitrary code execution with full confidentiality, integrity, and availability impact. Affected versions span all actively serviced SQL Server releases from 2017 through 2025, across both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches. No public exploit or CISA KEV listing has been identified at time of analysis, but the low authentication barrier (any valid SQL Server login) and network accessibility make this a high-priority patching target in enterprise environments.
Remote code execution in Microsoft SQL Server affects versions 2017 through 2025 via an integer overflow that triggers a heap-based buffer overflow in the database engine. An authenticated low-privileged attacker reachable over the network can exploit this flaw to achieve full system compromise - confidentiality, integrity, and availability all rated High. No public exploit or CISA KEV listing has been identified at time of analysis, and Microsoft has released patched builds across all affected version branches.
Heap-based buffer overflow in Microsoft SQL Server enables an authenticated, low-privileged network attacker to escalate privileges to full control of the database instance. Affected versions span SQL Server 2017 through the newly released SQL Server 2025 across both Cumulative Update (CU) and General Distribution Release (GDR) servicing tracks. Vendor-released patches are available; no public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution is possible in Microsoft SQL Server 2017 through 2025 via a heap-based buffer overflow (CWE-122) triggered over a network connection by a low-privileged authenticated attacker. The vulnerability spans all major in-support release branches including GDR and Cumulative Update servicing tracks, with fixed builds identified across eight distinct release configurations. No active exploitation has been confirmed in CISA KEV, but the low attack complexity and broad version coverage make this a high-priority patch target for any organization running SQL Server on the network perimeter or in multi-tenant environments.
Stack-based buffer overflow in Microsoft SQL Server 2019, 2022, and 2025 enables an authenticated network attacker with low-level privileges to execute arbitrary code, with scope change enabling impact beyond the SQL Server process itself. The vulnerability carries CVSS 8.5 (S:C) with high confidentiality, integrity, and availability impact, indicating that successful exploitation can compromise not just the database engine but potentially the underlying OS. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, though CVSS AC:H reflects meaningful exploitation complexity requiring careful payload construction against modern memory protections.
Code execution is possible in Microsoft SQL Server 2019, 2022, and 2025 (x64) through an untrusted pointer dereference in the database engine, which an attacker who can reach the instance and submit crafted queries may leverage to run code in the context of the SQL Server service. The vendor rates this 9.0 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), with a scope change indicating the compromise can cross a security boundary, but the practical prerequisites are substantial: the advisory characterizes the actor as an 'authorized attacker', our assessment treats a valid authenticated SQL session as realistically required despite the PR:N vector, and the high attack complexity means the dereferenced pointer is not deterministically controllable. Exploitation signals are currently low - EPSS is 0.47% (40th percentile), CISA SSVC records exploitation as 'none' with automation 'no', and no public exploit code has been identified at time of analysis.
Denial-of-service via integer overflow in Microsoft SQL Server allows unauthenticated remote attackers to crash the database service over a network connection. Affected versions span SQL Server 2017 through 2025 across both Cumulative Update and GDR branches. Microsoft has released patches; no public exploit code or active exploitation has been identified at time of analysis.
SQL injection in Microsoft SQL Server (versions 2017 through 2025) enables a network-authenticated low-privilege attacker to escalate privileges within the database engine. The flaw exists across all current servicing tracks - both cumulative update (CU) and general distribution release (GDR) branches - for SQL Server 2017, 2019, 2022, and 2025. No public exploit code or active exploitation has been identified at time of analysis, but vendor-released patches are available for all affected versions.
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows any low-privileged authenticated database user to exploit improper symbolic link resolution during SQL Server file operations to gain high-level control over the host system across the network. The root cause is CWE-59 (link following): SQL Server resolves file system links without validating the resolved path, enabling a low-privilege login to redirect the high-privilege SQL Server service account into accessing or overwriting attacker-controlled targets. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad affected version scope - spanning all major SQL Server releases still in mainstream support - make patching an immediate operational priority.
Privilege escalation via SQL injection in Microsoft SQL Server affects versions 2017 through 2025, allowing an authenticated low-privileged network user to gain elevated database privileges. The vulnerability stems from improper neutralization of special elements in SQL commands (CWE-89), and spans both Cumulative Update and General Distribution Release (GDR) servicing branches across all major SQL Server generations. Patch is available from Microsoft; no public exploit code or active exploitation (CISA KEV) confirmed at time of analysis.
SQL injection in Microsoft SQL Server enables a low-privileged authenticated attacker to escalate database privileges over a network connection. Affected versions span all active servicing branches of SQL Server 2017, 2019, 2022, and 2025 - including both GDR and Cumulative Update channels - making this a broad-surface enterprise concern. Vendor-released patches are available across all affected branches; no public exploit code or CISA KEV listing identified at time of analysis.
Privilege escalation in Microsoft SQL Server (versions 2017, 2019, 2022, and 2025) allows a low-privileged authenticated user to elevate their database permissions to a higher role over the network via CWE-269 improper privilege management. With a CVSS 8.8 score and vector AV:N/AC:L/PR:L, the flaw requires only a valid SQL Server login - no attack complexity, no user interaction - and yields full confidentiality, integrity, and availability impact on the database instance. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the near-zero exploitation prerequisites within a widely deployed enterprise platform make urgent patching essential.
Privilege escalation in Microsoft SQL Server allows an authenticated low-privileged network attacker to gain complete control over affected database instances across SQL Server 2017, 2019, 2022, and 2025. The flaw stems from CWE-1220 (Insufficient Granularity of Access Control), where the access control model fails to enforce fine-grained permission boundaries, permitting a standard database login to exceed its intended privilege scope. No active exploitation has been confirmed by CISA KEV and no public proof-of-concept has been identified, but the broad version coverage and full C:H/I:H/A:H CVSS impact make patching urgent. Vendor-released patches are available across all affected release tracks.
Remote code execution via deserialization of untrusted data in Microsoft SQL Server 2019, 2022, and 2025 allows an unauthenticated network attacker to achieve full system compromise with high complexity exploitation conditions. The vulnerability (CWE-502) exists in SQL Server's handling of serialized objects over the network, enabling attackers to trigger code execution without authentication. No public exploit or KEV listing is confirmed at time of analysis, though vendor-released patches are available across all three major affected release lines.
Authenticated users can exploit SQL injection vulnerabilities in SQL Server 2016-2025 to escalate privileges and gain unauthorized access across the network. This high-severity flaw (CVSS 8.8) affects multiple SQL Server versions with no available patch, allowing attackers with valid credentials to manipulate SQL commands and compromise system integrity. Organizations running these affected versions should implement network segmentation and monitor for suspicious database activity until a patch is released.
Privilege escalation in SQL Server 2016-2025 stems from insufficient input validation, enabling authenticated network attackers to gain elevated permissions. The high CVSS score of 8.8 reflects complete compromise of confidentiality, integrity, and availability, though no patch is currently available. Organizations running affected SQL Server versions should prioritize access controls and network segmentation until remediation is released.
SQL Server 2016-2025 contains an improper access control flaw that allows authenticated network attackers to escalate privileges without user interaction. Public exploit code exists for this vulnerability, which carries a CVSS score of 8.8 and affects confidentiality, integrity, and availability. No patch is currently available.
Privilege escalation in SQL Server 2022 and 2025 stems from insufficient authentication controls on critical functions, enabling authenticated network attackers to gain elevated privileges. The vulnerability affects administrators and authenticated users with network access to affected SQL Server instances. No patch is currently available, and exploitation requires high privileges but no user interaction.
Integer underflow (CWE-191) in Microsoft SQL Server enables a locally authenticated, low-privileged attacker to disclose sensitive information from the database engine without requiring user interaction. Affected versions span SQL Server 2017 through the newly released SQL Server 2025 across both GDR and cumulative update servicing tracks, with Microsoft releasing fixes across all affected branches. No public exploit code or active exploitation has been identified; SSVC scoring places this at Exploitation: none and Automatable: no, reflecting the constrained, local attack surface.
Buffer over-read (CWE-126) in Microsoft SQL Server 2019, 2022, and 2025 enables an authenticated low-privilege network attacker to trigger server-side memory disclosure. The flaw causes the SQL Server engine to read past an allocated buffer boundary and return excess memory contents to the caller over the network connection, potentially exposing in-memory data from other sessions or internal state. No public exploit code exists and CISA has not listed this in KEV; SSVC rates exploitation as none and technical impact as partial, making this a moderate-priority patch cycle item.
Heap-based buffer overflow (CWE-122) in Microsoft SQL Server allows a network-connected attacker with high database privileges to corrupt heap memory, causing at minimum a denial-of-service crash of the SQL Server process and potentially enabling code execution. Affects SQL Server versions 2017 through 2025 across both GDR and Cumulative Update servicing tracks. Microsoft has released patches for all affected versions; no public exploit code or CISA KEV listing identified at time of analysis, though the description's claim of code execution potential warrants close attention despite vendor CVSS metrics reflecting only availability impact.
Out-of-bounds read in Microsoft SQL Server (versions 2017 through 2025) allows a low-privileged authenticated attacker to disclose sensitive information over the network by triggering a memory read beyond an allocated buffer boundary. The CVSS vector confirms network-accessible exploitation requiring only low-privilege credentials (PR:L), with no user interaction needed, resulting in high confidentiality impact. No public exploit code or active exploitation has been identified; Microsoft has released patches across all affected servicing branches.
Out-of-bounds memory read in Microsoft SQL Server exposes sensitive server-side data to authenticated network attackers. The flaw (CWE-125) spans four major SQL Server release lines - 2017 through 2025 - in both GDR and Cumulative Update servicing tracks, making it broadly present across enterprise environments. An attacker holding low-privilege SQL Server credentials can exploit this to read memory contents beyond an intended buffer boundary, achieving high confidentiality impact without any user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to disclose potentially sensitive server memory contents over the network. The flaw spans all four supported major versions across both Cumulative Update (CU) and General Distribution Release (GDR) servicing tracks, producing a broad enterprise exposure surface. Microsoft has released patches for all affected version branches; no public exploit code or CISA KEV listing has been identified at the time of analysis.
Out-of-bounds read in Microsoft SQL Server exposes server memory to authenticated low-privileged network attackers, enabling information disclosure across SQL Server 2017 through 2025. The flaw (CWE-125) is reachable over the network without elevated privileges or user interaction, making it accessible to any valid SQL Server login. Microsoft has released patches across all affected servicing branches; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft SQL Server enables an authenticated network attacker with low privileges to disclose sensitive server-side information. The flaw spans SQL Server 2017 through 2025 across both Cumulative Update and General Distribution Release servicing branches, representing a broad exposure across enterprise database deployments. No public exploit code or active exploitation has been identified at time of analysis, and Microsoft has released patches across all affected servicing branches.
Out-of-bounds memory read in Microsoft SQL Server 2017 through 2025 allows network-authenticated, low-privilege database users to disclose sensitive server-side memory contents. The flaw (CWE-125) is reachable over the network with only a valid database account, requiring no user interaction, and affects all currently supported SQL Server release tracks - both Cumulative Update and General Distribution Release channels. Microsoft has released patches across all affected branches; no public exploit code has been identified at time of analysis.
Uninitialized memory exposure in Microsoft SQL Server 2017 through 2025 allows a network-authenticated low-privilege attacker to read sensitive server-side data. The root cause is CWE-908 (Use of Uninitialized Resource), where a memory region is accessed before initialization, potentially leaking residual contents from query buffers, session state, or internal structures. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor patches are available across all affected version branches.
Uninitialized memory disclosure in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to read sensitive server memory contents over a network connection. The CWE-908 flaw affects all major SQL Server release branches - 2017, 2019, 2022, and 2025 - across both GDR and Cumulative Update servicing tracks. Microsoft has released patches for all affected versions; no public exploit code or active exploitation is documented at time of analysis.
Out-of-bounds read in Microsoft SQL Server 2017 through 2025 exposes server memory contents to authenticated low-privilege network attackers, enabling information disclosure without integrity or availability impact. The flaw (CWE-125) requires only a valid low-privilege database account and network access, making it accessible to any SQL login holder - including application service accounts - against unpatched instances. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the breadth of affected versions across four major SQL Server release families widens the attack surface considerably.
Integer overflow in Microsoft SQL Server 2022 and 2025 enables an authenticated, low-privilege network attacker to crash the database service, causing a denial of service for all connected clients. The flaw (CWE-190) is triggered by crafted network input that induces an integer wraparound in SQL Server's processing logic, resulting in complete availability loss. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; vendor-released patches are available for all affected versions.
Out-of-bounds read in Microsoft SQL Server 2017 through 2025 enables an authenticated low-privileged attacker to crash the database engine remotely, causing a denial of service. The flaw (CWE-125) is reachable over the network with no user interaction required, making it suitable for disrupting database availability from any network-connected authenticated session. No public exploit has been identified at time of analysis, and Microsoft has released patched builds across all affected major versions.
Out-of-bounds read (CWE-125) in Microsoft SQL Server enables an authenticated, network-adjacent attacker to disclose sensitive in-process memory contents. Affecting SQL Server versions 2017 through 2025 across both GDR and Cumulative Update servicing tracks, exploitation requires valid database credentials but no elevated privileges. Microsoft has released patched builds for all affected versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Out-of-bounds read in Microsoft SQL Server allows a low-privileged, authenticated attacker to remotely disclose sensitive memory contents over a network. Affected builds span SQL Server 2017 through 2025 across both Cumulative Update and GDR servicing branches. With a CVSS 6.5 and C:H, successful exploitation could expose confidential server-side data; no public exploit or CISA KEV listing has been identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft SQL Server 2019, 2022, and 2025 enables an authenticated low-privilege network attacker to disclose potentially sensitive server memory contents. The flaw is exploitable over the network with low complexity and requires only a valid database login - no user interaction or elevated privileges are needed. Microsoft has released patches across all six affected servicing branches; no public exploit code or CISA KEV active exploitation has been identified at time of analysis.
Buffer over-read (CWE-126) in Microsoft SQL Server exposes adjacent memory contents to authenticated low-privileged network attackers across SQL Server versions 2017 through 2025. The vulnerability spans both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches, making patch management across heterogeneous SQL Server estates non-trivial. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
SQL Server information disclosure via buffer over-read (CWE-126) allows an authenticated low-privilege network attacker to read memory contents beyond an intended buffer boundary, potentially exposing sensitive in-process data. The flaw spans SQL Server 2017, 2019, 2022, and 2025 across both GDR and Cumulative Update servicing branches, making the affected population broad. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but the network-accessible, low-complexity attack path warrants timely patching given the enterprise prevalence of SQL Server.
Out-of-bounds read in Microsoft SQL Server 2022 and 2025 enables an authenticated, low-privileged attacker to disclose sensitive server memory contents over the network. The flaw (CWE-125) resides in the SQL Server engine and is reachable via crafted network queries, resulting in high confidentiality impact with no integrity or availability loss. No public exploit code or active exploitation has been identified at time of analysis, but a vendor-released patch is available.
Uninitialized memory disclosure in Microsoft SQL Server 2017 through 2025 allows a network-connected low-privilege authenticated attacker to read sensitive data from SQL Server memory. The flaw (CWE-908) arises when the engine allocates and uses memory without proper initialization, potentially exposing contents from adjacent queries, sessions, or internal data structures. Microsoft has released patches across all affected Cumulative Update and GDR servicing branches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Insufficient audit logging in Microsoft SQL Server 2022 and 2025 allows a low-privileged authenticated attacker to bypass a security control over the network, resulting in high-confidentiality data access without a corresponding audit trail. Affected versions span both the GDR and Cumulative Update branches of SQL Server 2022 (pre-16.0.4275.2 / pre-16.0.1200.5) and SQL Server 2025 (pre-17.0.4085.5 / pre-17.0.1135.8). No public exploit has been identified at time of analysis, and Microsoft has released patches across all affected servicing branches.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.
Microsoft SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Heap-based buffer overflow in Microsoft SQL Server 2022 enables an authenticated low-privileged network attacker to execute arbitrary code on the database server host. Both the GDR and CU 26 servicing branches of SQL Server 2022 are affected, with Microsoft having released fixed builds in both channels. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, but the low attack complexity and full network reachability make this a high-priority patching target for any organization running SQL Server 2022.
Privilege escalation in Microsoft SQL Server (2017 through 2025) allows a low-privileged authenticated network attacker to gain full administrative control via improper access control enforcement. The vulnerability spans four major SQL Server release trains - 2017, 2019, 2022, and 2025 - including both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches. No public exploit code has been identified at time of analysis, but the low attack complexity and broad affected surface across enterprise SQL Server deployments make this a meaningful priority for patching.
Local privilege escalation in Microsoft SQL Server affects versions 2017 through 2025 via a use-after-free memory corruption flaw exploitable by an authenticated low-privilege user. An attacker with existing local access and SQL Server login credentials can trigger the UAF condition to achieve full C:H/I:H/A:H impact, effectively gaining elevated privileges on the host. No public exploit code has been identified at time of analysis, and Microsoft has released patches across all affected CU and GDR servicing channels.
Remote code execution in Microsoft SQL Server 2019, 2022, and 2025 is achievable by an authenticated low-privilege attacker via deserialization of untrusted data (CWE-502) delivered over the network. The flaw covers multiple build tracks across three major SQL Server versions, with full confidentiality, integrity, and availability impact on the database host. Microsoft has released patches for all affected versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in Microsoft SQL Server allows a network-authenticated low-privileged attacker to elevate to higher database roles via a weak authentication mechanism (CWE-1390). Affected releases span SQL Server 2017 through 2025 across both General Distribution Release (GDR) and Cumulative Update (CU) servicing branches. Microsoft has released patched builds for all affected versions; no public exploit or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft SQL Server (versions 2017 through 2025) enables any authenticated network attacker holding a low-privileged SQL Server account to achieve full remote code execution on the database host. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms exploitation requires no user interaction and is low-complexity once a valid login is held, with complete confidentiality, integrity, and availability impact. No public exploit identified at time of analysis; Microsoft has released patches across all affected major release branches including both CU and GDR servicing tracks.
Privilege escalation in Microsoft SQL Server allows a low-privileged, authenticated network attacker to elevate access rights and achieve full control over database confidentiality, integrity, and availability. The root cause is CWE-1220 (Insufficient Granularity of Access Control), meaning SQL Server fails to enforce sufficiently fine-grained permission boundaries between privilege tiers, permitting lateral movement to higher roles without authorization. All active major servicing branches are affected - SQL Server 2017, 2019, 2022, and 2025 - and Microsoft has released patches across both Cumulative Update and GDR servicing tracks. No public exploit or active exploitation (KEV) has been identified at time of analysis.
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to elevate to higher database or system-level permissions over a standard network connection. The flaw, rooted in CWE-284 (Improper Access Control), requires only a valid low-privilege SQL Server login and network reachability to the instance - no special configuration or user interaction is needed. Microsoft has released patches across all affected cumulative update and GDR servicing branches; no public exploit code or active exploitation has been identified at time of analysis.
Heap-based buffer overflow in Microsoft SQL Server allows a low-privileged local attacker to execute arbitrary code with full confidentiality, integrity, and availability impact on the SQL Server host. Affected versions span four major release generations - SQL Server 2017 through 2025 - across both Cumulative Update and GDR servicing tracks, indicating a systemic code path defect rather than an isolated regression. No public exploit code or CISA KEV listing exists at time of analysis; vendor-released patches are available for all affected builds.
Heap-based buffer overflow in Microsoft SQL Server 2017 through 2025 enables an authenticated network attacker with low-level database credentials to achieve full remote code execution on the SQL Server host. The CVSS 8.8 (PR:L) rating reflects that any valid SQL Server login - not just a DBA - can trigger the overflow, making this dangerous in environments with broad user bases or shared credentials. No public exploit has been identified at time of analysis, but patches are available from Microsoft across all affected major versions.
Heap-based buffer overflow in Microsoft SQL Server (2017 through 2025) enables network-reachable, low-privileged authenticated attackers to execute arbitrary code on the database server. With CVSS 8.8 (AV:N/AC:L/PR:L/UI:N), exploitation requires only a valid database login - no administrative privileges or user interaction - making this a credible lateral-movement vector in environments with reachable SQL Server instances. Vendor patches are available across all affected GDR and CU servicing tracks; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in the Microsoft SQL Server engine (SQL Server 2022 and SQL Server 2025 on x64) can let an attacker corrupt heap memory and potentially achieve code execution under the database service account over a network connection. Microsoft's own description frames the attacker as 'authorized,' meaning a valid SQL Server login or compromised database credentials plus network reachability to the engine are required, and our independent assessment scores the issue as CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H rather than the vendor-published 9.8 (AV:N/AC:L/PR:N/UI:N), which would imply fully unauthenticated remote code execution and contradicts the stated authorization prerequisite. CISA's SSVC evaluation records no exploitation and marks the flaw non-automatable, and no public exploit code has been identified at time of analysis; EPSS is low at 0.83% (55th percentile), though the aggregate C:H/I:H/A:H impact makes prompt patching of exposed instances worthwhile.
Heap-based buffer overflow in Microsoft SQL Server 2017 through 2025 enables an authenticated low-privilege network attacker to execute arbitrary code on the database host. The vulnerability (CWE-122) resides in a network-reachable code path, requiring only valid SQL Server credentials - no elevated database roles or special configuration. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the full CIA impact and low attack complexity make this a high-priority patching target in enterprise environments.
Out-of-bounds read in Microsoft SQL Server 2019, 2022, and 2025 on x64 can, under specific memory conditions, be steered into remote code execution against the database engine. The vendor scores this 9.0 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), while our assessment rates it 9.0 under a more conservative vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) because the advisory's own 'authorized attacker' wording and Microsoft's history with SQL Server flaws indicate a valid database login is realistically required; high attack complexity (AC:H) further limits reliable exploitation to environments where SQL Server accepts connections from untrusted or semi-trusted network segments. There is no indication of active exploitation (not in CISA KEV; SSVC exploitation 'none'), no public exploit code identified at time of analysis, and EPSS is low at 0.47% (40th percentile), making this a patch-priority issue for exposed or multi-tenant SQL Server deployments rather than an emergency internet-wide threat; vendor-released patches are available.
Heap-based buffer overflow in Microsoft SQL Server 2017, 2019, 2022, and 2025 (x64) can be triggered over the network and, if exploited successfully, allows code execution in the context of the SQL Server engine process on the database host. Microsoft describes the attacker as 'authorized', and the assessed vector requires a valid authenticated session (PR:L, AC:H), which is stricter than the 9.8 unauthenticated headline score from the NVD entry; no public exploit code has been identified and EPSS is low at 0.63% (48th percentile), with CISA SSVC recording Exploitation: none and Automatable: no. Vendor patches are available, and only instances at or above the corrected build thresholds are protected.
Heap-based buffer overflow in Microsoft SQL Server enables a low-privileged authenticated attacker to remotely execute arbitrary code on the database server. All major active SQL Server branches are affected - 2017, 2019, 2022, and the newly released 2025 edition - across both Cumulative Update (CU) and General Distribution Release (GDR) servicing tracks. Microsoft has released build-specific patches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Use-after-free memory corruption in Microsoft SQL Server enables a network-authenticated low-privileged attacker to achieve arbitrary code execution with full confidentiality, integrity, and availability impact. Affected versions span all actively serviced SQL Server releases from 2017 through 2025, across both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches. No public exploit or CISA KEV listing has been identified at time of analysis, but the low authentication barrier (any valid SQL Server login) and network accessibility make this a high-priority patching target in enterprise environments.
Remote code execution in Microsoft SQL Server affects versions 2017 through 2025 via an integer overflow that triggers a heap-based buffer overflow in the database engine. An authenticated low-privileged attacker reachable over the network can exploit this flaw to achieve full system compromise - confidentiality, integrity, and availability all rated High. No public exploit or CISA KEV listing has been identified at time of analysis, and Microsoft has released patched builds across all affected version branches.
Heap-based buffer overflow in Microsoft SQL Server enables an authenticated, low-privileged network attacker to escalate privileges to full control of the database instance. Affected versions span SQL Server 2017 through the newly released SQL Server 2025 across both Cumulative Update (CU) and General Distribution Release (GDR) servicing tracks. Vendor-released patches are available; no public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution is possible in Microsoft SQL Server 2017 through 2025 via a heap-based buffer overflow (CWE-122) triggered over a network connection by a low-privileged authenticated attacker. The vulnerability spans all major in-support release branches including GDR and Cumulative Update servicing tracks, with fixed builds identified across eight distinct release configurations. No active exploitation has been confirmed in CISA KEV, but the low attack complexity and broad version coverage make this a high-priority patch target for any organization running SQL Server on the network perimeter or in multi-tenant environments.
Stack-based buffer overflow in Microsoft SQL Server 2019, 2022, and 2025 enables an authenticated network attacker with low-level privileges to execute arbitrary code, with scope change enabling impact beyond the SQL Server process itself. The vulnerability carries CVSS 8.5 (S:C) with high confidentiality, integrity, and availability impact, indicating that successful exploitation can compromise not just the database engine but potentially the underlying OS. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, though CVSS AC:H reflects meaningful exploitation complexity requiring careful payload construction against modern memory protections.
Code execution is possible in Microsoft SQL Server 2019, 2022, and 2025 (x64) through an untrusted pointer dereference in the database engine, which an attacker who can reach the instance and submit crafted queries may leverage to run code in the context of the SQL Server service. The vendor rates this 9.0 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), with a scope change indicating the compromise can cross a security boundary, but the practical prerequisites are substantial: the advisory characterizes the actor as an 'authorized attacker', our assessment treats a valid authenticated SQL session as realistically required despite the PR:N vector, and the high attack complexity means the dereferenced pointer is not deterministically controllable. Exploitation signals are currently low - EPSS is 0.47% (40th percentile), CISA SSVC records exploitation as 'none' with automation 'no', and no public exploit code has been identified at time of analysis.
Denial-of-service via integer overflow in Microsoft SQL Server allows unauthenticated remote attackers to crash the database service over a network connection. Affected versions span SQL Server 2017 through 2025 across both Cumulative Update and GDR branches. Microsoft has released patches; no public exploit code or active exploitation has been identified at time of analysis.
SQL injection in Microsoft SQL Server (versions 2017 through 2025) enables a network-authenticated low-privilege attacker to escalate privileges within the database engine. The flaw exists across all current servicing tracks - both cumulative update (CU) and general distribution release (GDR) branches - for SQL Server 2017, 2019, 2022, and 2025. No public exploit code or active exploitation has been identified at time of analysis, but vendor-released patches are available for all affected versions.
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows any low-privileged authenticated database user to exploit improper symbolic link resolution during SQL Server file operations to gain high-level control over the host system across the network. The root cause is CWE-59 (link following): SQL Server resolves file system links without validating the resolved path, enabling a low-privilege login to redirect the high-privilege SQL Server service account into accessing or overwriting attacker-controlled targets. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad affected version scope - spanning all major SQL Server releases still in mainstream support - make patching an immediate operational priority.
Privilege escalation via SQL injection in Microsoft SQL Server affects versions 2017 through 2025, allowing an authenticated low-privileged network user to gain elevated database privileges. The vulnerability stems from improper neutralization of special elements in SQL commands (CWE-89), and spans both Cumulative Update and General Distribution Release (GDR) servicing branches across all major SQL Server generations. Patch is available from Microsoft; no public exploit code or active exploitation (CISA KEV) confirmed at time of analysis.
SQL injection in Microsoft SQL Server enables a low-privileged authenticated attacker to escalate database privileges over a network connection. Affected versions span all active servicing branches of SQL Server 2017, 2019, 2022, and 2025 - including both GDR and Cumulative Update channels - making this a broad-surface enterprise concern. Vendor-released patches are available across all affected branches; no public exploit code or CISA KEV listing identified at time of analysis.
Privilege escalation in Microsoft SQL Server (versions 2017, 2019, 2022, and 2025) allows a low-privileged authenticated user to elevate their database permissions to a higher role over the network via CWE-269 improper privilege management. With a CVSS 8.8 score and vector AV:N/AC:L/PR:L, the flaw requires only a valid SQL Server login - no attack complexity, no user interaction - and yields full confidentiality, integrity, and availability impact on the database instance. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the near-zero exploitation prerequisites within a widely deployed enterprise platform make urgent patching essential.
Privilege escalation in Microsoft SQL Server allows an authenticated low-privileged network attacker to gain complete control over affected database instances across SQL Server 2017, 2019, 2022, and 2025. The flaw stems from CWE-1220 (Insufficient Granularity of Access Control), where the access control model fails to enforce fine-grained permission boundaries, permitting a standard database login to exceed its intended privilege scope. No active exploitation has been confirmed by CISA KEV and no public proof-of-concept has been identified, but the broad version coverage and full C:H/I:H/A:H CVSS impact make patching urgent. Vendor-released patches are available across all affected release tracks.
Remote code execution via deserialization of untrusted data in Microsoft SQL Server 2019, 2022, and 2025 allows an unauthenticated network attacker to achieve full system compromise with high complexity exploitation conditions. The vulnerability (CWE-502) exists in SQL Server's handling of serialized objects over the network, enabling attackers to trigger code execution without authentication. No public exploit or KEV listing is confirmed at time of analysis, though vendor-released patches are available across all three major affected release lines.
Authenticated users can exploit SQL injection vulnerabilities in SQL Server 2016-2025 to escalate privileges and gain unauthorized access across the network. This high-severity flaw (CVSS 8.8) affects multiple SQL Server versions with no available patch, allowing attackers with valid credentials to manipulate SQL commands and compromise system integrity. Organizations running these affected versions should implement network segmentation and monitor for suspicious database activity until a patch is released.
Privilege escalation in SQL Server 2016-2025 stems from insufficient input validation, enabling authenticated network attackers to gain elevated permissions. The high CVSS score of 8.8 reflects complete compromise of confidentiality, integrity, and availability, though no patch is currently available. Organizations running affected SQL Server versions should prioritize access controls and network segmentation until remediation is released.
SQL Server 2016-2025 contains an improper access control flaw that allows authenticated network attackers to escalate privileges without user interaction. Public exploit code exists for this vulnerability, which carries a CVSS score of 8.8 and affects confidentiality, integrity, and availability. No patch is currently available.
Privilege escalation in SQL Server 2022 and 2025 stems from insufficient authentication controls on critical functions, enabling authenticated network attackers to gain elevated privileges. The vulnerability affects administrators and authenticated users with network access to affected SQL Server instances. No patch is currently available, and exploitation requires high privileges but no user interaction.
Integer underflow (CWE-191) in Microsoft SQL Server enables a locally authenticated, low-privileged attacker to disclose sensitive information from the database engine without requiring user interaction. Affected versions span SQL Server 2017 through the newly released SQL Server 2025 across both GDR and cumulative update servicing tracks, with Microsoft releasing fixes across all affected branches. No public exploit code or active exploitation has been identified; SSVC scoring places this at Exploitation: none and Automatable: no, reflecting the constrained, local attack surface.
Buffer over-read (CWE-126) in Microsoft SQL Server 2019, 2022, and 2025 enables an authenticated low-privilege network attacker to trigger server-side memory disclosure. The flaw causes the SQL Server engine to read past an allocated buffer boundary and return excess memory contents to the caller over the network connection, potentially exposing in-memory data from other sessions or internal state. No public exploit code exists and CISA has not listed this in KEV; SSVC rates exploitation as none and technical impact as partial, making this a moderate-priority patch cycle item.
Heap-based buffer overflow (CWE-122) in Microsoft SQL Server allows a network-connected attacker with high database privileges to corrupt heap memory, causing at minimum a denial-of-service crash of the SQL Server process and potentially enabling code execution. Affects SQL Server versions 2017 through 2025 across both GDR and Cumulative Update servicing tracks. Microsoft has released patches for all affected versions; no public exploit code or CISA KEV listing identified at time of analysis, though the description's claim of code execution potential warrants close attention despite vendor CVSS metrics reflecting only availability impact.
Out-of-bounds read in Microsoft SQL Server (versions 2017 through 2025) allows a low-privileged authenticated attacker to disclose sensitive information over the network by triggering a memory read beyond an allocated buffer boundary. The CVSS vector confirms network-accessible exploitation requiring only low-privilege credentials (PR:L), with no user interaction needed, resulting in high confidentiality impact. No public exploit code or active exploitation has been identified; Microsoft has released patches across all affected servicing branches.
Out-of-bounds memory read in Microsoft SQL Server exposes sensitive server-side data to authenticated network attackers. The flaw (CWE-125) spans four major SQL Server release lines - 2017 through 2025 - in both GDR and Cumulative Update servicing tracks, making it broadly present across enterprise environments. An attacker holding low-privilege SQL Server credentials can exploit this to read memory contents beyond an intended buffer boundary, achieving high confidentiality impact without any user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to disclose potentially sensitive server memory contents over the network. The flaw spans all four supported major versions across both Cumulative Update (CU) and General Distribution Release (GDR) servicing tracks, producing a broad enterprise exposure surface. Microsoft has released patches for all affected version branches; no public exploit code or CISA KEV listing has been identified at the time of analysis.
Out-of-bounds read in Microsoft SQL Server exposes server memory to authenticated low-privileged network attackers, enabling information disclosure across SQL Server 2017 through 2025. The flaw (CWE-125) is reachable over the network without elevated privileges or user interaction, making it accessible to any valid SQL Server login. Microsoft has released patches across all affected servicing branches; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft SQL Server enables an authenticated network attacker with low privileges to disclose sensitive server-side information. The flaw spans SQL Server 2017 through 2025 across both Cumulative Update and General Distribution Release servicing branches, representing a broad exposure across enterprise database deployments. No public exploit code or active exploitation has been identified at time of analysis, and Microsoft has released patches across all affected servicing branches.
Out-of-bounds memory read in Microsoft SQL Server 2017 through 2025 allows network-authenticated, low-privilege database users to disclose sensitive server-side memory contents. The flaw (CWE-125) is reachable over the network with only a valid database account, requiring no user interaction, and affects all currently supported SQL Server release tracks - both Cumulative Update and General Distribution Release channels. Microsoft has released patches across all affected branches; no public exploit code has been identified at time of analysis.
Uninitialized memory exposure in Microsoft SQL Server 2017 through 2025 allows a network-authenticated low-privilege attacker to read sensitive server-side data. The root cause is CWE-908 (Use of Uninitialized Resource), where a memory region is accessed before initialization, potentially leaking residual contents from query buffers, session state, or internal structures. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor patches are available across all affected version branches.
Uninitialized memory disclosure in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to read sensitive server memory contents over a network connection. The CWE-908 flaw affects all major SQL Server release branches - 2017, 2019, 2022, and 2025 - across both GDR and Cumulative Update servicing tracks. Microsoft has released patches for all affected versions; no public exploit code or active exploitation is documented at time of analysis.
Out-of-bounds read in Microsoft SQL Server 2017 through 2025 exposes server memory contents to authenticated low-privilege network attackers, enabling information disclosure without integrity or availability impact. The flaw (CWE-125) requires only a valid low-privilege database account and network access, making it accessible to any SQL login holder - including application service accounts - against unpatched instances. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the breadth of affected versions across four major SQL Server release families widens the attack surface considerably.
Integer overflow in Microsoft SQL Server 2022 and 2025 enables an authenticated, low-privilege network attacker to crash the database service, causing a denial of service for all connected clients. The flaw (CWE-190) is triggered by crafted network input that induces an integer wraparound in SQL Server's processing logic, resulting in complete availability loss. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; vendor-released patches are available for all affected versions.
Out-of-bounds read in Microsoft SQL Server 2017 through 2025 enables an authenticated low-privileged attacker to crash the database engine remotely, causing a denial of service. The flaw (CWE-125) is reachable over the network with no user interaction required, making it suitable for disrupting database availability from any network-connected authenticated session. No public exploit has been identified at time of analysis, and Microsoft has released patched builds across all affected major versions.
Out-of-bounds read (CWE-125) in Microsoft SQL Server enables an authenticated, network-adjacent attacker to disclose sensitive in-process memory contents. Affecting SQL Server versions 2017 through 2025 across both GDR and Cumulative Update servicing tracks, exploitation requires valid database credentials but no elevated privileges. Microsoft has released patched builds for all affected versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Out-of-bounds read in Microsoft SQL Server allows a low-privileged, authenticated attacker to remotely disclose sensitive memory contents over a network. Affected builds span SQL Server 2017 through 2025 across both Cumulative Update and GDR servicing branches. With a CVSS 6.5 and C:H, successful exploitation could expose confidential server-side data; no public exploit or CISA KEV listing has been identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft SQL Server 2019, 2022, and 2025 enables an authenticated low-privilege network attacker to disclose potentially sensitive server memory contents. The flaw is exploitable over the network with low complexity and requires only a valid database login - no user interaction or elevated privileges are needed. Microsoft has released patches across all six affected servicing branches; no public exploit code or CISA KEV active exploitation has been identified at time of analysis.
Buffer over-read (CWE-126) in Microsoft SQL Server exposes adjacent memory contents to authenticated low-privileged network attackers across SQL Server versions 2017 through 2025. The vulnerability spans both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches, making patch management across heterogeneous SQL Server estates non-trivial. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
SQL Server information disclosure via buffer over-read (CWE-126) allows an authenticated low-privilege network attacker to read memory contents beyond an intended buffer boundary, potentially exposing sensitive in-process data. The flaw spans SQL Server 2017, 2019, 2022, and 2025 across both GDR and Cumulative Update servicing branches, making the affected population broad. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but the network-accessible, low-complexity attack path warrants timely patching given the enterprise prevalence of SQL Server.
Out-of-bounds read in Microsoft SQL Server 2022 and 2025 enables an authenticated, low-privileged attacker to disclose sensitive server memory contents over the network. The flaw (CWE-125) resides in the SQL Server engine and is reachable via crafted network queries, resulting in high confidentiality impact with no integrity or availability loss. No public exploit code or active exploitation has been identified at time of analysis, but a vendor-released patch is available.
Uninitialized memory disclosure in Microsoft SQL Server 2017 through 2025 allows a network-connected low-privilege authenticated attacker to read sensitive data from SQL Server memory. The flaw (CWE-908) arises when the engine allocates and uses memory without proper initialization, potentially exposing contents from adjacent queries, sessions, or internal data structures. Microsoft has released patches across all affected Cumulative Update and GDR servicing branches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Insufficient audit logging in Microsoft SQL Server 2022 and 2025 allows a low-privileged authenticated attacker to bypass a security control over the network, resulting in high-confidentiality data access without a corresponding audit trail. Affected versions span both the GDR and Cumulative Update branches of SQL Server 2022 (pre-16.0.4275.2 / pre-16.0.1200.5) and SQL Server 2025 (pre-17.0.4085.5 / pre-17.0.1135.8). No public exploit has been identified at time of analysis, and Microsoft has released patches across all affected servicing branches.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.
Microsoft SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.