Microsoft SQL Server Information Disclosure Vulnerability
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.3%
exploitation probability
0.3%top 77% of all CVEs
observed exploitation
nono source reports it
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft SQL Server 2017 (CU 31)Microsoft · Microsoft SQL Server 2017 (GDR)Microsoft · Microsoft SQL Server 2019 (CU 32)Microsoft · Microsoft SQL Server 2019 (GDR)Microsoft · Microsoft SQL Server 2022 (CU 26)Microsoft · Microsoft SQL Server 2022 (GDR)Microsoft · Microsoft SQL Server 2025 (CU8)Microsoft · Microsoft SQL Server 2025 for x64-based Systems (GDR)