vulnerability

Microsoft CVE-2025-59499: Microsoft SQL Server Elevation of Privilege Vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
9	(AV:N/AC:L/Au:S/C:C/I:C/A:C)	Nov 11, 2025	Nov 11, 2025	Nov 11, 2025

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

Published

Nov 11, 2025

Added

Nov 11, 2025

Modified

Nov 11, 2025

Description

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Solutions

msft-kb5068401-574ef900-fbd9-419a-95c6-ce50e77f08ce-x64msft-kb5068402-73347396-3db5-45a6-9c18-ac30f2a2c283-x64msft-kb5068403-0a00a90e-3696-4f9e-9cfe-6833d790a982-x64msft-kb5068404-82c68655-8e42-4631-b081-e82728e919ca-x64msft-kb5068405-ce2b3ad7-1329-4c0e-8c85-42cd6f922c98-x64msft-kb5068406-48c38250-dab5-4a0e-aefc-4d1664a69ec5-x64msft-kb5068407-40e40f61-30e0-4018-9cd3-542f86264d85-x64

References

CVE-2025-59499
https://attackerkb.com/topics/CVE-2025-59499
MSKB-5068400
MSKB-5068401
MSKB-5068402
MSKB-5068403
MSKB-5068404
MSKB-5068405
MSKB-5068406
MSKB-5068407

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today