Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118111 Published on November 10, 2026

Microsoft SQL Server Elevation of Privilege Vulnerability
Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

Origin Validation Error

The software does not properly verify that the source of data or communication is valid.


Products Associated with CVE-2026-118111

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft SQL Server 2017 (GDR): Microsoft SQL Server 2017 for x64-based Systems (CU31): Microsoft SQL Server 2019 (GDR): Microsoft SQL Server 2019 for x64-based Systems (CU32): Microsoft SQL Server 2022 (GDR): Microsoft SQL Server 2022 for x64-based Systems (CU27): Microsoft SQL Server 2025 CU10: Microsoft SQL Server 2025 for x64-based Systems (GDR):