Microsoft SQL Server Information Disclosure Vulnerability

A vulnerability in Microsoft SQL Server allows unauthorized attackers to disclose information over a network by exploiting the use of uninitialized resources. This issue affects SQL Server 2019 and 2022.

Impact

Successful exploitation of this vulnerability could allow an attacker to view heap memory from a privileged process running on the server.

Remediation

Users can update to the latest cumulative or general distribution release security updates for SQL Server 2019 or 2022. Instructions for downloading these updates are available on the Microsoft Update Catalog.