Microsoft SQL Server 2022 (CU 19) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Microsoft SQL Server 2022 (CU 19), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.5CVE-2025-49717microsoftmicrosoft sql server 2019 (cu 32)+5
EPSS score
1.12%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.7.5CVE-2025-49719microsoftmicrosoft sql server 2016 for service pack 2 (gdr)+11
EPSS score
15.50%
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.7.5CVE-2025-49718microsoftmicrosoft sql server 2019 (cu 32)+5
EPSS score
3.90%
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.