Microsoft SQL Server Information Disclosure Vulnerability

6.5 CVSS

Vulnerability Description

Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47997

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47997

More from Microsoft

View All →

CVE-2025-9611

Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

High 7.2

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

High 7

CVE-2025-7326

EOL ASP.NET Core Elevation of Privilege Vulnerability

High 7

CVE-2025-65046

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Low 3.1

CVE-2025-65041

Microsoft Partner Center Elevation of Privilege Vulnerability

Critical 10

Affected Vendor

Microsoft

View all reports →

Affected Software

Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (CU 32), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (CU 20), Microsoft SQL Server 2022 (GDR)

Vulnerable Versions:

13.0.0, 14.0.0, 15.0.0.0, 15.0.0, 16.0.0.0, 16.0.0