Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-116929 Published on November 10, 2026

Microsoft SQL Server Elevation of Privilege Vulnerability
Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

Execution with Unnecessary Privileges

The software performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.


Products Associated with CVE-2026-116929

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft SQL Server 2017 (GDR): Microsoft SQL Server 2017 for x64-based Systems (CU31): Microsoft SQL Server 2019 (GDR): Microsoft SQL Server 2019 for x64-based Systems (CU32): Microsoft SQL Server 2022 (GDR): Microsoft SQL Server 2022 for x64-based Systems (CU27): Microsoft SQL Server 2025 CU10: Microsoft SQL Server 2025 for x64-based Systems (GDR):