CVE-2025-49718
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)
Description
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
Affected (4)
Products: Microsoft: Sql Server 2019, Sql Server 2022
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 15.0.2000.5 to 15.0.2135.5 | |
| From 16.0.1000.6 to 16.0.1140.6 |
Related CWEs
References (1)
Source: secure@microsoft.com
Vendor Advisory
Timeline
No history available yet.