Unrated severityNVD Advisory· Published Jul 8, 2025· Updated Feb 26, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2025-49717
Description
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Affected products
4- Microsoft/Microsoft SQL Server 2019 (CU 32)v5Range: 15.0.0.0
- Microsoft/Microsoft SQL Server 2019 (GDR)v5Range: 15.0.0
- Microsoft/Microsoft SQL Server 2022 (CU 19)v5Range: 16.0.0.0
- Microsoft/Microsoft SQL Server 2022 (GDR)v5Range: 16.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49717mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.