Microsoft update

KB5058722

https

Fixed in

TI-2025-31689 CVE-2025-49719 · GHSA-j6vp-2h76-fhq9

MEDIUM 55

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15498 Published 2025-07-08 Fixed in 13.0.6460.7, 13.0.7055.9 +6 CWE-20

TI-2025-31688 CVE-2025-49718 · GHSA-4p9p-mw39-jmxv

MEDIUM 45

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03904 Published 2025-07-08 Fixed in 15.0.4435.7, 15.0.2135.5 +2 CWE-908

TI-2025-31687 CVE-2025-49717 · GHSA-9397-6r66-qmgq

MEDIUM 41

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01116 Published 2025-07-08 Fixed in 15.0.4435.7, 15.0.2135.5 +2 CWE-122