Microsoft Sql Server 2025 (Cu 6)
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:microsoft_sql_server_2025_(cu_6):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Microsoft Sql Server 2025 (Cu 6) (3d2a341f-0fe0-511a-a868-f1cb4abf7b3d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-54118 |
vulnerable | 2026-07-29 01:00:27.527757 |
Microsoft SQL Server Remote Code Execution Vulnerability
CRITICAL (9.8)
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Published: 2026-07-14T17:05:05.500Z
Updated: 2026-08-20T17:07:05.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54117 |
vulnerable | 2026-07-29 01:00:27.515564 |
Microsoft SQL Server Remote Code Execution Vulnerability
CRITICAL (9.8)
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Published: 2026-07-14T17:05:04.964Z
Updated: 2026-08-20T17:07:06.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54116 |
vulnerable | 2026-07-29 01:00:27.513321 |
Microsoft SQL Server Information Disclosure Vulnerability
MEDIUM (6.5)
Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.
Published: 2026-07-14T17:09:08.631Z
Updated: 2026-08-20T17:05:26.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50468 |
vulnerable | 2026-07-29 00:57:48.374222 |
Microsoft SQL Server Information Disclosure Vulnerability
MEDIUM (6.5)
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Published: 2026-07-14T17:09:08.079Z
Updated: 2026-08-20T17:05:25.558Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47296 |
vulnerable | 2026-07-29 00:55:00.045144 |
Microsoft SQL Server Elevation of Privilege Vulnerability
HIGH (7.5)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published: 2026-07-14T17:04:15.041Z
Updated: 2026-08-20T17:00:38.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47295 |
vulnerable | 2026-07-29 00:55:00.037875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.