CVE-2025-49718

CVE-2025-49718 is a Microsoft SQL Server information-disclosure vulnerability described as “Use of uninitialized resource in SQL Server” that could allow an attacker to disclose information over the network. Connected sources confirm this CVE is addressed by Microsoft security updates and fixes i...

CVE-2025-49718 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2025-49719

CVE-2025-49719 is an information-disclosure vulnerability in Microsoft SQL Server reported as an information disclosure due to improper input validation. Public sources indicate it affects SQL Server versions dating back to 2016 and is being addressed by Microsoft with security updates; specific ...

CVE-2025-49719 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2025-49719 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2025-49717 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2025-49717 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2025-49717

CVE-2025-49717 is a Microsoft SQL Server remote code execution vulnerability caused by a heap-based buffer overflow in SQL Server. The impact is network-exploitable with authenticated attacker privileges (low) and no user interaction, under changed scope, per the CVSS data. Public disclosures and...

KB5058713 - Description of the security update for SQL Server 2019 GDR: July 8, 2025

None None...

KB5058714 - Description of the security update for SQL Server 2017 CU31: July 8, 2025

None None...

KB5058717 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: July 8, 2025

None None...

KB5058718 - Description of the security update for SQL Server 2016 SP3 GDR: July 8, 2025

None None...

KB5058712 - Description of the security update for SQL Server 2022 GDR: July 8, 2025

None None...

KB5058722 - Description of the security update for SQL Server 2019 CU32: July 8, 2025

None None...

KB5058721 - Description of the security update for SQL Server 2022 CU19: July 8, 2025

None None...

KB5058716 - Description of the security update for SQL Server 2017 GDR: July 8, 2025

None None...

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network...

Microsoft SQL Server Information Disclosure Vulnerability

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2025-28607

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The issue is related to a heap-based buffer overflow in SQL Server, which allows an authorized attacker to execute code over a network. This can be achieved through a network connection,...