Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-118112 Published on November 10, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Vulnerability Analysis
Weakness Type
What is a Code Injection Vulnerability?
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CVE-2026-118112 has been classified to as a Code Injection vulnerability or weakness.
Products Associated with CVE-2026-118112
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
