CVE-2025-59499

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

KB5068403 - Description of the security update for SQL Server 2017 GDR: November 11, 2025

None None...

KB5068404 - Description of the security update for SQL Server 2019 CU32: November 11, 2025

None None...

KB5068405 - Description of the security update for SQL Server 2019 GDR: November 11, 2025

None None...

KB5068406 - Description of the security update for SQL Server 2022 CU21: November 11, 2025

None None...

KB5068401 - Description of the security update for SQL Server 2016 SP3 GDR: November 11, 2025

None None...

KB5068402 - Description of the security update for SQL Server 2017 CU31: November 11, 2025

None None...

KB5068407 - Description of the security update for SQL Server 2022 GDR: November 11, 2025

None None...

KLA90053 PE vulnerability in Microsoft SQL Server

An elevation of privilege vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59499 Related products Microsoft-SQL-Server Microsoft-Azure CVE list CVE-2025-59499 critical KB list 5068405 5068403 5068401...