medium6.5
CVE-2025-47997
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information…
Impact
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sql Server 2016 | from 13.0.6300.2 before 13.0.6470.1 from 13.0.7000.253 before 13.0.7065.1 |
| Microsoft | Sql Server 2017 | from 14.0.1000.169 before 14.0.2085.1 from 14.0.3006.16 before 14.0.3505.1 |
| Microsoft | Sql Server 2019 | from 15.0.2000.5 before 15.0.2145.1 from 15.0.4003.23 before 15.0.4445.1 |
| Microsoft | Sql Server 2022 | from 16.0.1000.6 before 16.0.1150.1 from 16.0.4003.1 before 16.0.4212.1 |