9.1
Critique
CVE-2026-66309 Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network
Description
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure SQL Database | Versions non publiées |
Références
- Azure SQL Database Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Azure SQL Database
Les 6 CVE de Azure SQL Database →
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a…
10.0
Critique
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critique
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critique
CVE-2026-63522
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate…
7.8
Élevée