A critical untrusted pointer dereference vulnerability in Microsoft SQL Server 2022 allows authenticated attackers to achieve remote code execution.

The flaw is an untrusted pointer dereference (CWE-822) occurring within SQL Server that permits an authenticated attacker with low privileges to execute arbitrary code over the network.

The ability to execute arbitrary code on a database server presents a severe risk to data integrity, confidentiality, and system availability. Given the CVSS score of 8.8, this vulnerability is classified as High, reflecting the potential for full system compromise if an attacker gains access to the environment. Unauthorized code execution could lead to data exfiltration, lateral movement within the network, or complete takeover of the database host.

Immediate Action: Update Microsoft SQL Server 2022 (GDR) to version 16.0.1175.1 or later to resolve the underlying pointer dereference flaw.

Proactive Monitoring: Review SQL Server access logs for unusual administrative commands or execution patterns originating from standard user accounts.

Compensating Controls: Implement strict network segmentation to limit access to the SQL Server instance to authorized personnel only, reducing the attack surface for potential exploitation.

Public Exploit Available: Unknown

Due to the severity of remote code execution, organizations must prioritize the application of the vendor-provided security update. Administrators should verify their current build versions against the affected range and schedule maintenance windows to patch the SQL Server instances immediately to mitigate the risk of exploitation.