Advisories · Technology
Microsoft SQL Server 2025 (CU 6).
Every CVE that names Microsoft SQL Server 2025 (CU 6) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Memory corruption
- CVSS 6.5 Medium
Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- CWE-126
- CVSS 8.8 High
Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection
- CVSS 8.8 High
Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- Insecure deserialization
- CVSS 7.5 High
Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- SQL injection