CVE-2025-49759HighCVSS 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
🎯 Affected products8
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack
- Microsoft SQL Server 2017 for x64-based Systems (CU 31)
- Microsoft SQL Server 2017 for x64-based Systems (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU 32)
- Microsoft SQL Server 2019 for x64-based Systems (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU 20)
- Microsoft SQL Server 2022 for x64-based Systems (GDR)
✅ Remediation
KB5063760 (Security Update) — fixed build 14.0.2080.1 KB5063758 (Security Update) — fixed build 15.0.2140.1 KB5063762 (Security Update) — fixed build 13.0.6465.1 KB5063761 (Security Update) — fixed build 13.0.7060.1 KB5063759 (Security Update) — fixed build 14.0.3500.1 KB5063756 (Security Update) — fixed build 16.0.1145.1 KB5063814 (Security Update) — fixed build 16.0.4210.1 KB5063757 (Security Update) — fixed build 15.0.4440.1
🔗 References (17)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49759
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108330
- referencehttps://support.microsoft.com/help/5063760
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108327
- referencehttps://support.microsoft.com/help/5063758
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108329
- referencehttps://support.microsoft.com/help/5063762
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108328
- referencehttps://support.microsoft.com/help/5063761
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108331
- referencehttps://support.microsoft.com/help/5063759
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108325
- referencehttps://support.microsoft.com/help/5063756
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108324
- referencehttps://support.microsoft.com/help/5063814
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108326
- referencehttps://support.microsoft.com/help/5063757