Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.
CWE-250