CVE-2025-49758

Publication date

2025-08-12 17:09:42

Family

microsoft

State

PUBLISHED

Description

Improper neutralization of special elements used in an sql command (sql injection) in SQL Server allows an authorized attacker to elevate privileges over a network.