#VU112568 Use of uninitialized resource in Microsoft SQL Server - CVE-2025-49718

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU112568

#VU112568 Use of uninitialized resource in Microsoft SQL Server - CVE-2025-49718

Published: July 9, 2025


Vulnerability identifier: #VU112568
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2025-49718
CWE-ID: CWE-908
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Microsoft SQL Server
Software vendor:
Microsoft

Description

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to usage of uninitialized resources in Microsoft SQL Server. A remote attacker can pass specially crafted data to the application, trigger uninitialized usage of resources and gain access to sensitive information on the system.


Remediation

Install updates from vendor's website.

External links