Microsoft Microsoft SQL Server 2025 (CU 2) güvenlik açıkları (CVE)

8.8Yüksek

CVE-2026-26116 8 ay önce

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2025 (CU 2); Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1.2%EPSS

8.8Yüksek

CVE-2026-26115 8 ay önce

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

1.2%EPSS

8.8Yüksek

CVE-2026-21262 8 ay önce

SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft Microsoft SQL Server 2017 (CU 31); Microsoft Microsoft SQL Server 2017 (GDR)

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

1.7%EPSS