Integer overflow or wraparound in Microsoft SQL Server allows an authorized local user to gain higher privileges on the host. The flaw is triggered when the engine processes numeric data that exceeds a data type’s limits, causing the system to miscalculate values. As a result, the offending process can execute code paths that normally require elevated rights, leading to local privilege escalation.

Microsoft SQL Server 2019 (GDR and CU32), Microsoft SQL Server 2022 (GDR and CU27), and Microsoft SQL Server 2025 (CU8, CU9, and GDR) running on x64-based systems are affected. All instances of these versions that are operational locally can be exploited.

The CVSS score of 7 indicates a moderate to high severity for local privilege escalation. The EPSS score is less than 1%, suggesting a very low likelihood of exploitation at this time, and the vulnerability is not listed in CISA’s KEV catalog. The attack requires local authorization; an attacker must have some level of legitimate access to the SQL Server service to trigger the overflow and achieve privilege escalation.