{
  "cveId": "CVE-2016-7249",
  "url": "https://patchblox.com/security/cve/CVE-2016-7249",
  "summary": "CVE-2016-7249 is fixed in 2 products on 1 platform, first by KB3194716, released November 8, 2016. It is not reported as exploited. Patch Radar priority: High.",
  "title": "SQL RDBMS Engine Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003EAn elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker\u0027s credentials allow access to an affected SQL server database.\u003C/p\u003E\n\u003Cp\u003EAn attacker who successfully exploited this vulnerability could gain elevated privileges that could be used to view, change, or delete data; or create new accounts.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how SQL Server handles pointer casting.\u003C/p\u003E",
  "published": "2016-11-08T08:00:00Z",
  "severity": "Important",
  "epss": 0.11895,
  "epssPercentile": 0.96157,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Unlikely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7249",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2016 for x64-based Systems (CU)",
      "fixedVersion": "",
      "fix": "KB3194717",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194717",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2016 for x64-based Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB3194716",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194716",
      "released": "2016-11-08T08:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}