Microsoft SQL Server Elevation of Privilege Vulnerability

A vulnerability in SQL Server allows an authorized attacker to bypass authentication for critical functions, enabling privilege escalation over the network. This issue affects SQL Server 2022 and 2025 on x64-based systems.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain debugging privileges and access sensitive memory data.

Remediation

Users can update to the latest security patches available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles 5073177, 5072936, and 5073031.