Multiple vulnerabilities in Microsoft SQL Server

Description

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Power BI can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in SQL Server for Linux Containers can be exploited remotely to gain privileges.

Original advisories

• CVE-2022-23254

• CVE-2022-23276

Related products

• Microsoft-SQL-Server

CVE list

• CVE-2022-23254
  warning
• CVE-2022-23276
  critical

KB list

• 5010657

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com