7.8
High
CVE-2026-63522 Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate…
Description
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure SQL Database | Versions not published |
References
- Azure SQL Database Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure SQL Database
The 6 CVEs of Azure SQL Database →
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a…
10.0
Critical
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critical
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network
9.1
Critical
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critical