← Database

CVE-2025-24999

HIGH CVSS: 8.8 Published: 2025-08-12 Modified: 2026-06-17

Description

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Sql Server 2019Microsoft Sql Server 2017Microsoft Sql Server 2022Microsoft Sql Server 2016

Weakness Type

CWE-284

References