9.1
Critical
CVE-2026-66309 Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network
Description
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure SQL Database | Versions not published |
References
- Azure SQL Database Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure SQL Database
The 6 CVEs of Azure SQL Database →
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a…
10.0
Critical
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critical
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critical
CVE-2026-63522
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate…
7.8
High