Microsoft SQL Server Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft SQL Server. This issue arises from an untrusted pointer dereference, allowing an authorized attacker to execute code over the network. The vulnerability affects several versions of SQL Server, including SQL Server 2022, 2019, 2017, and 2016, with specific update guidance available for each version.

Impact

Exploitation of this vulnerability could lead to remote code execution, with the attacker gaining SQL sysadmin privileges.

Remediation

Users should update to the latest security update for their version of SQL Server. Specific update instructions can be found in the Microsoft Security Update Guide.