77 matches found
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
EUVD-2026-29079
Corteza contains a SQL injection vulnerability in its Microsoft SQL Server MSSQL backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8...
The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large-scale commercial database system developed by Microsoft Corporation, used under the Microsoft Windows operating system. There are security vulnerabilities in Microsoft SQL Server. Attackers can exploit these vulnerabilities to gain higher privileges. The following...
CVE-2025-62575 Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures...
KLA89272 SUI vulnerability in Microsoft SQL Server
A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface, bypass security restrictions. Original advisories CVE-2025-59250 Exploitation Related products Microsoft-SQL-Server CVE list CVE-2025-59250 critical Solution Install...
The vulnerability of the SQL Server relational database management system, related to synchronization errors when using shared resources, allows attackers to disclose sensitive information.
The vulnerability of the Microsoft SQL Server relational database management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
CVE-2025-55227
CVE-2025-55227 is an Elevation of Privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements in a command (command injection). The CVE entry notes that an authenticated, network-connected attacker can leverage this to elevate privileges. Microsoft adviso...
KB5065220 - Description of the security update for SQL Server 2022 CU20: September 9, 2025
None None...
MAL-2025-38653 Malicious code in vscode-mssql (npm)
The package vscode-mssql was found to contain malicious code...
Vulnerabilities fixed in Microsoft SQL Server
Microsoft has fixed vulnerabilities in SQL Server. The vulnerabilities are related to improper access management and SQL injection, which allows authorized attackers to escalate privileges within a network. This can lead to unauthorized access and manipulation of sensitive data. The vulnerabiliti...
CVE-2025-47954 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-49759 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-24999 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-49758 Microsoft SQL Server Elevation of Privilege Vulnerability
...
KB5063762 - Description of the security update for SQL Server 2016 SP3 GDR: August 12, 2025
None None...