Vulnerabilidades de Microsoft Microsoft SQL Server 2025 (CU 2) (CVE)

Registros CVE publicados para Microsoft Microsoft SQL Server 2025 (CU 2), los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
8.8Alta
CVE-2026-26116

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2025 (CU 2); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.2%EPSS
8.8Alta
CVE-2026-26115

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

1.2%EPSS
8.8Alta
CVE-2026-21262

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

1.7%EPSS