CVE record · 2 sources
CVE-2026-66813
CVSS 8.1Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.
- Vendor
- Microsoft
- Product
- Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU32)
- CVSS v3.1
- 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-125
- Exposure class
- Database
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.
Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.
-
Microsoft SQL Server Elevation of Privilege Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.