5696 matches found
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2025-55227
Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Privilege Escalation Code Injection
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
Patch Tuesday - September 2025
Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...
Vulnerabilities fixed in Microsoft SQL Server
Microsoft has fixed vulnerabilities in SQL Server. A malicious party could exploit the vulnerabilities to cause a denial-of-service DoS, grant themselves elevated privileges and/or gain access to sensitive data. Microsoft has made updates available that fix the described vulnerabilities. We...
CVE-2025-55227
Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-55227
Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-47997 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2025-47997 Microsoft SQL Server Information Disclosure Vulnerability
...
KB5065227 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: September 9, 2025
None None...
KB5065226 - Description of the security update for SQL Server 2016 SP3 GDR: September 9, 2025
None None...
KB5065225 - Description of the security update for SQL Server 2017 CU31: September 9, 2025
None None...
KB5065223 - Description of the security update for SQL Server 2019 GDR: September 9, 2025
None None...
KB5065222 - Description of the security update for SQL Server 2019 CU32: September 9, 2025
None None...