SQL Server Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
🎯 Affected products13
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack
- Microsoft SQL Server 2017 for x64-based Systems (CU 31)
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2017 for x64-based Systems (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU 32)
- Microsoft SQL Server 2019 for x64-based Systems (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU 24)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Microsoft SQL Server 2022 for x64-based Systems (GDR)
- Microsoft SQL Server 2025 for x64-based Systems (CU3)
- Microsoft SQL Server 2025 for x64-based Systems (CU9)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
✅ Remediation
KB5126934 (Security Update) — fixed build 16.0.4305.5 KB5128496 (Security Update) — fixed build 14.0.3560.2 KB5126967 (Security Update) — fixed build 17.0.5015.4 KB5083245 (Security Update) — fixed build 17.0.4030.1 KB5084814 (Security Update) — fixed build 17.0.1110.1 KB5128492 (Security Update) — fixed build 17.0.1145.4 KB5083252 (Security Update) — fixed build 16.0.4250.1 KB5084819 (Security Update) — fixed build 14.0.2105.1 KB5128497 (Security Update) — fixed build 14.0.2140.2 KB5084817 (Security Update) — fixed build 15.0.2165.1 KB5128495 (Security Update) — fixed build 15.0.2200.2 KB5084821 (Security Update) — fixed build 13.0.6485.1 KB5084820 (Security Update) — fixed build 13.0.7080.1 KB5084818 (Security Update) — fixed build 14.0.3525.1 KB5084815 (Security Update) — fixed build 16.0.1175.1 KB5128493 (Security Update) — fixed build 16.0.1210.3 KB5084816 (Security Update) — fixed build 15.0.4465.1 KB5128494 (Security Update) — fixed build 15.0.4500.2
🔗 References (37)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32176
- patchhttps://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a
- referencehttps://support.microsoft.com/help/5126934
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b
- referencehttps://support.microsoft.com/help/5128496
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252
- referencehttps://support.microsoft.com/help/5126967
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108618
- referencehttps://support.microsoft.com/help/5083245
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108625
- referencehttps://support.microsoft.com/help/5084814
- patchhttps://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb
- referencehttps://support.microsoft.com/help/5128492
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108620
- referencehttps://support.microsoft.com/help/5083252
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108621
- referencehttps://support.microsoft.com/help/5084819
- patchhttps://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b
- referencehttps://support.microsoft.com/help/5128497
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108619
- referencehttps://support.microsoft.com/help/5084817
- patchhttps://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1
- referencehttps://support.microsoft.com/help/5128495
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108617
- referencehttps://support.microsoft.com/help/5084821
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108624
- referencehttps://support.microsoft.com/help/5084820
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108623
- referencehttps://support.microsoft.com/help/5084818
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108622
- referencehttps://support.microsoft.com/help/5084815
- patchhttps://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296
- referencehttps://support.microsoft.com/help/5128493
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108626
- referencehttps://support.microsoft.com/help/5084816
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d
- referencehttps://support.microsoft.com/help/5128494