Known vulnerabilities in Microsoft SQL Server 2016 Service Pack 3

Vendor: Microsoft

Software: Microsoft SQL Server

Version: 2016 Service Pack 3

Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU118288 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-59499	CWE-89	Medium	No	No	-	11.11.2025	SB2025111157
#VU115081 - Command injection CVE-2025-55227	CWE-77	Medium	No	No	-	09.09.2025	SB2025090982
#VU115079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-47997	CWE-362	Medium	No	No	-	09.09.2025	SB2025090982 SB2025110342
#VU113858 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-49759	CWE-89	Medium	No	No	-	12.08.2025	SB2025081271
#VU113856 - Improper Access Control CVE-2025-24999	CWE-284	Medium	No	No	-	12.08.2025	SB2025081271
#VU113855 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-53727	CWE-89	Medium	No	No	-	12.08.2025	SB2025081271
#VU113853 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-49758	CWE-89	Medium	No	No	-	12.08.2025	SB2025081271