Nov 2026: Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-84010 Published on November 10, 2026

Microsoft SQL Server Elevation of Privilege Vulnerability
Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

Exposed Dangerous Method or Function

The software provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.


Products Associated with CVE-2026-84010

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft SQL Server 2017 (GDR): Microsoft SQL Server 2017 for x64-based Systems (CU31): Microsoft SQL Server 2019 (GDR): Microsoft SQL Server 2019 for x64-based Systems (CU32): Microsoft SQL Server 2022 (GDR): Microsoft SQL Server 2022 for x64-based Systems (CU27): Microsoft SQL Server 2025 CU10: Microsoft SQL Server 2025 for x64-based Systems (GDR):