← CVE Intelligence

CVE-2026-32176

SQL Server Elevation of Privilege Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR)	affected 13.0.0 before 13.0.6485.1
Microsoft / Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack	affected 13.0.0 before 13.0.7080.1
Microsoft / Microsoft SQL Server 2017 (CU 31)	affected 14.0.0 before 14.0.3525.1
Microsoft / Microsoft SQL Server 2017 (GDR)	affected 14.0.0 before 14.0.2105.1
Microsoft / Microsoft SQL Server 2017 for x64-based Systems (CU31)	affected 14.0.3006.16 before 14.0.3560.2
Microsoft / Microsoft SQL Server 2019 (CU 32)	affected 15.0.0.0 before 15.0.4465.1
Microsoft / Microsoft SQL Server 2019 (GDR)	affected 15.0.0 before 15.0.2165.1
Microsoft / Microsoft SQL Server 2022 (GDR)	affected 16.0.0 before 16.0.1175.1
Microsoft / Microsoft SQL Server 2022 for x64-based Systems (CU 24)	affected 16.0.0.0 before 16.0.4250.1
Microsoft / Microsoft SQL Server 2022 for x64-based Systems (CU27)	affected 16.0.4003.1 before 16.0.4305.5
Microsoft / Microsoft SQL Server 2025 (CU 3)	affected 17.0.4030.1 before 17.0.4030.1
Microsoft / Microsoft SQL Server 2025 for x64-based Systems (CU9)	affected 17.0.4006.2 before 17.0.5015.4
Microsoft / Microsoft SQL Server 2025 for x64-based Systems (GDR)	affected 17.0.1050.2 before 17.0.1110.1

CWE

CWE-89

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32176

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.