← Database
CVE-2026-32167
MEDIUM
CVSS: 6.7
Published: 2026-04-14
Modified: 2026-06-17
Description
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
Affected Platforms
Microsoft Sql Server 2016Microsoft Sql Server 2019Microsoft Sql Server 2025Microsoft Sql Server 2017Microsoft Sql Server 2022