Microsoft update

KB5063762

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) 13.0.6465.1

Fixes 4 records

TI-2025-18677 CVE-2025-24999 · GHSA-g9qp-9hg6-hmp7

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 44

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01765 Published 2025-08-12 Fixed in 13.0.6465.1, 13.0.7060.1 +6 CWE-284

TI-2025-33638 CVE-2025-53727 · GHSA-m89q-9xxf-mgvh

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 43

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01261 Published 2025-08-12 Fixed in 13.0.6465.1, 13.0.7060.1 +6 CWE-89

TI-2025-31724 CVE-2025-49759 · GHSA-hwf4-qmx5-35cv

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01209 Published 2025-08-12 Fixed in 13.0.6465.1, 13.0.7060.1 +6 CWE-89

TI-2025-31723 CVE-2025-49758 · GHSA-4r6w-pg4g-qvvh

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01007 Published 2025-08-12 Fixed in 13.0.6465.1, 13.0.7060.1 +6 CWE-269