Microsoft SQL Server 2025 (CU 2) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Microsoft SQL Server 2025 (CU 2), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-21262microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14
EPSS score
2.08%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.8.8CVE-2026-26115microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14
EPSS score
1.00%
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.8.8CVE-2026-26116microsoftmicrosoft sql server 2025 (cu 2)+6
EPSS score
1.03%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.