CVE-2026-21262KEVEXPLOITEDPATCHED

microsoft · sql_server_2016

SQL Server Elevation of Privilege Vulnerability

Description

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected Products

Vendor	Product	Versions
microsoft	sql_server_2016	13.0.0, 13.0.0, 14.0.0, 14.0.0, 15.0.0.0, 15.0.0, 16.0.0, 16.0.0.0, 17.0.0.0, 17.0.1050.2

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21262(vendor-advisory, patch)

Related News (1 articles)

Tier B

CERT-FR20h ago

Multiples vulnérabilités dans Tenable Identity Exposure (15 avril 2026)

→ No new info (linked only)

CVSS 3.18.8 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA KEV✅ Yes

Actively exploited✅ Yes

Patch available

13.0.6480.413.0.7075.514.0.2100.414.0.3520.415.0.2160.415.4460.416.0.1170.516.0.4240.417.0.1105.217.0.4020.2

CWECWE-284

PublishedMar 10, 2026

Last enriched14d ago

Trending Score91

Source articles1

Independent1

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2026-32201EXPKEV

Microsoft SharePoint Server Spoofing Vulnerability

Trending: 149

CRITICALCVE-2026-33824EXP

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Trending: 89

HIGHCVE-2026-23666EXP

.NET Framework Denial of Service Vulnerability

Trending: 74

HIGHCVE-2026-32157EXP

Remote Desktop Client Remote Code Execution Vulnerability

Trending: 73

HIGHCVE-2026-33825EXP

Microsoft Defender Elevation of Privilege Vulnerability

Trending: 72

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Mar 10, 2026

Added to CISA KEV

Mar 10, 2026

Discovered by ZDM

Apr 1, 2026

Actively Exploited

Apr 14, 2026

Patch Available

Apr 14, 2026