01 Record

CVE-2026-66309

Azure SQL Database Elevation of Privilege Vulnerability

CriticalPUBLISHEDCNA: microsoft

Base score9.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

02 Description

Azure SQL Database Elevation of Privilege Vulnerability

Published

2026-08-20 21:47Z1 DAY AGO

Last updated

2026-08-20 22:02Z1 DAY AGO

Reserved

2026-07-24

Assigning CNA

microsoft

Record state

PUBLISHED

Severity

Critical (CVSS 9.1)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

278fd7675ff678cadc6565dedb31882b3d50eae029206b04d51a88035d1f8372

VendorProductVersionsPlatforms

msrc.microsoft.comAzure SQL Database Elevation of Privilege Vulnerabilityhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66309vendor-advisorypatch