137 matches found
MAL-2025-38653 Malicious code in vscode-mssql (npm)
The package vscode-mssql was found to contain malicious code...
Vulnerabilities fixed in Microsoft SQL Server
Microsoft has fixed vulnerabilities in SQL Server. The vulnerabilities are related to improper access management and SQL injection, which allows authorized attackers to escalate privileges within a network. This can lead to unauthorized access and manipulation of sensitive data. The vulnerabiliti...
CVE-2025-47954 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-49759 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-24999 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2025-49758 Microsoft SQL Server Elevation of Privilege Vulnerability
...
KB5063760 - Description of the security update for SQL Server 2017 GDR: August 12, 2025
None None...
KB5063762 - Description of the security update for SQL Server 2016 SP3 GDR: August 12, 2025
None None...
KB5063758 - Description of the security update for SQL Server 2019 GDR: August 12, 2025
None None...
KB5063757 - Description of the security update for SQL Server 2019 CU32: August 12, 2025
None None...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
KLA86590 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2025-53727 CVE-2025-49758 CVE-2025-47954 CVE-2025-49759 CVE-2025-24999 Exploitation Public exploits exist for this vulnerability. Related...
Unspecified Vulnerability in Microsoft SQL Server (CNVD-2025-16773)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A security vulnerability exists in Microsoft SQL Server. An attacker can exploit the vulnerability to gain access to sensitive...
SQL Server Uninitialized Resource Disclosure
The vulnerability of the Microsoft SQL Server relational database management system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Native Client Microsoft SQL Server Code Execution
The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Use-After-Free
The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...