Microsoft SQL Server 2025 (CU 3) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Microsoft SQL Server 2025 (CU 3), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2026-32176microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+17
EPSS score
0.25%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.7.8CVE-2026-32167microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+14
EPSS score
0.32%
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.