CVE-2026-47296

Vendor

Microsoft

Product

SQL Server

CVSS

7.8

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 27
   CVE NVD 14 Jul 2026

   Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate…

   Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-47296 Microsoft
2. 19
   Advisory MSRC 14 Jul 2026

   CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability

   Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

   CVE-2026-47296 Microsoft