Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
2025-08-12T18:15:27.500
2025-08-14T17:14:01.977
Analyzed
CVSSv3.1: 8.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | sql_server_2016 | < 13.0.6465.1 | Yes |
| Application | microsoft | sql_server_2016 | < 13.0.7060.1 | Yes |
| Application | microsoft | sql_server_2017 | < 14.0.2080.1 | Yes |
| Application | microsoft | sql_server_2017 | < 14.0.3500.1 | Yes |
| Application | microsoft | sql_server_2019 | < 15.0.2140.1 | Yes |
| Application | microsoft | sql_server_2019 | < 15.0.4440.1 | Yes |
| Application | microsoft | sql_server_2022 | < 16.0.1145.1 | Yes |
| Application | microsoft | sql_server_2022 | < 16.0.4210.1 | Yes |