Read the docs
Microsoft update

KB5068407

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01177 Published 2025-11-11 Fixed in 13.0.6475.1, 13.0.7070.1 +6 CWE-89