High WID-SEC-2025-1493 3 CVEs

Microsoft SQL Server: Mehrere Schwachstellen

Published Jul 8, 2025 · Updated Jul 13, 2025 · Revision 2 · de-DE

Vendor: Microsoft Product: SQL Server 2016 Product: SQL Server 2017 Product: SQL Server 2019 Product: SQL Server 2022 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft SQL Server ausnutzen, um Informationen offenzulegen, und um beliebigen Programmcode auszuführen.

Product

Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.

Vulnerabilities 3

High 8.5

CVE-2025-49717

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2019 (CU 32)

Jul 8, 2025
High 7.5

CVE-2025-49718

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2019 (CU 32)

Jul 8, 2025
High 7.5

CVE-2025-49719 EPSS 15%

Microsoft SQL Server Information Disclosure Vulnerability

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2017 (GDR)

Jul 8, 2025

Revision history

2025-07-13 #2
Versionsanpassung SQL Server 2022 gemäß neuer Quelle
2025-07-08 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
Latest updates available for currently supported versions of SQL Server vom 2025-07-13
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates