vulnerability

Microsoft CVE-2025-49758: Microsoft SQL Server Elevation of Privilege Vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
9	(AV:N/AC:L/Au:S/C:C/I:C/A:C)	Aug 12, 2025	Aug 12, 2025	Aug 13, 2025

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

Published

Aug 12, 2025

Added

Aug 12, 2025

Modified

Aug 13, 2025

Description

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Solutions

msft-kb5063756-287f292a-f7c3-4ed0-a6cc-83b2769b5d51-x64msft-kb5063757-fa523afc-31a6-41cd-898f-535ca5e52b2d-x64msft-kb5063758-2661f142-1ff0-4388-b072-dd1ffe9d5cdb-x64msft-kb5063759-21992a70-d69f-46aa-af98-066500ea11cb-x64msft-kb5063760-a11ab121-2237-4674-be08-3b8a5d83a571-x64msft-kb5063762-ecc4b94b-ec09-42f3-a533-606277ce92f1-x64msft-kb5063814-e43dc772-22c9-47a5-8364-03b002cbc98e-x64

References

CVE-2025-49758
https://attackerkb.com/topics/CVE-2025-49758
MSKB-5063756
MSKB-5063757
MSKB-5063758
MSKB-5063759
MSKB-5063760
MSKB-5063761
MSKB-5063762
MSKB-5063814

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today