← Database

CVE-2026-77485

HIGH CVSS: 7.0 Published: 2026-09-08 Modified: 2026-09-15

Description

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Affected Platforms

Microsoft Sql Server 2019Microsoft Sql Server 2025Microsoft Sql Server 2017Microsoft Sql Server 2022

Weakness Type

CWE-416

References