CVE-2026-32167HighCVSS 6.7
SQL Server Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
🎯 Affected products10
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack
- Microsoft SQL Server 2017 for x64-based Systems (CU 31)
- Microsoft SQL Server 2017 for x64-based Systems (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU 32)
- Microsoft SQL Server 2019 for x64-based Systems (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU 24)
- Microsoft SQL Server 2022 for x64-based Systems (GDR)
- Microsoft SQL Server 2025 for x64-based Systems (CU3)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
✅ Remediation
KB5083245 (Security Update) — fixed build 17.0.4030.1 KB5083252 (Security Update) — fixed build 16.0.4250.1 KB5084819 (Security Update) — fixed build 14.0.2105.1 KB5084817 (Security Update) — fixed build 15.0.2165.1 KB5084821 (Security Update) — fixed build 13.0.6485.1 KB5084820 (Security Update) — fixed build 13.0.7080.1 KB5084815 (Security Update) — fixed build 16.0.1175.1 KB5084818 (Security Update) — fixed build 14.0.3525.1 KB5084814 (Security Update) — fixed build 17.0.1110.1 KB5084816 (Security Update) — fixed build 15.0.4465.1
🔗 References (21)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32167
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108618
- referencehttps://support.microsoft.com/help/5083245
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108620
- referencehttps://support.microsoft.com/help/5083252
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108621
- referencehttps://support.microsoft.com/help/5084819
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108619
- referencehttps://support.microsoft.com/help/5084817
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108617
- referencehttps://support.microsoft.com/help/5084821
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108624
- referencehttps://support.microsoft.com/help/5084820
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108622
- referencehttps://support.microsoft.com/help/5084815
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108623
- referencehttps://support.microsoft.com/help/5084818
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108625
- referencehttps://support.microsoft.com/help/5084814
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108626
- referencehttps://support.microsoft.com/help/5084816