Advisories · Technology

Microsoft SQL Server 2019 (CU 32).

Every CVE that names Microsoft SQL Server 2019 (CU 32) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-21262 CVE record

CVSS 8.8 High

SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2025-59499 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 11 Nov 2025
CVE-2025-55227 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Command injection
Not analysed yet 9 Sept 2025
CVE-2025-47997 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Information disclosure
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-49759 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 12 Aug 2025
CVE-2025-24999 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 12 Aug 2025
CVE-2025-53727 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
Not analysed yet 12 Aug 2025
CVE-2025-49758 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 12 Aug 2025
CVE-2025-49718 CVE record

CVSS 7.5 High

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49719 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2016 for Service Pack 2 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-20
Not analysed yet 8 Jul 2025
CVE-2025-49717 CVE record

CVSS 8.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 8 Jul 2025