TI-2025-37035 CVE-2025-59499 · GHSA-pm2c-qc4c-h96f
Microsoft SQL Server Elevation of Privilege Vulnerability
Priority MEDIUM 42
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.