CVE-2025-49719 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2025-49719

CVE-2025-49719 is an information-disclosure vulnerability in Microsoft SQL Server reported as an information disclosure due to improper input validation. Public sources indicate it affects SQL Server versions dating back to 2016 and is being addressed by Microsoft with security updates; specific ...

CVE-2025-49719 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2025-49717 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2025-49717 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2025-49717

CVE-2025-49717 is a Microsoft SQL Server remote code execution vulnerability caused by a heap-based buffer overflow in SQL Server. The impact is network-exploitable with authenticated attacker privileges (low) and no user interaction, under changed scope, per the CVSS data. Public disclosures and...

KB5058712 - Description of the security update for SQL Server 2022 GDR: July 8, 2025

None None...

Microsoft SQL Server Information Disclosure Vulnerability

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network...

KB5058713 - Description of the security update for SQL Server 2019 GDR: July 8, 2025

None None...

KB5058721 - Description of the security update for SQL Server 2022 CU19: July 8, 2025

None None...

KB5058718 - Description of the security update for SQL Server 2016 SP3 GDR: July 8, 2025

None None...

KB5058716 - Description of the security update for SQL Server 2017 GDR: July 8, 2025

None None...

KB5058717 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: July 8, 2025

None None...

KB5058722 - Description of the security update for SQL Server 2019 CU32: July 8, 2025

None None...

KB5058714 - Description of the security update for SQL Server 2017 CU31: July 8, 2025

None None...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network...

PT-2025-28607 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The issue is related to a heap-based buffer overflow in SQL Server, which allows an authorized attacker to execute code over a network. This can be achieved through a network connection,...

PT-2025-28608 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The issue involves the use of an uninitialized resource in SQL Server, allowing an unauthorized attacker to disclose information over a network. Recommendations: At the moment, there is ...

Security Updates for Microsoft SQL Server (July 2025)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...