CVE-2026-85876
CVE-2026-85876 · Microsoft SQL Server Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVSS 7.0 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
microsoft sql server 2019 (gdr)
- Versions
- ≥ 15.0.0, < 15.0.2200.2: Affected (custom)
Update to 15.0.2200.2
microsoft sql server 2019 for x64-based systems (cu32)
- Versions
- ≥ 15.0.4003.23, < 15.0.4500.2: Affected (custom)
Update to 15.0.4500.2
microsoft sql server 2022 (gdr)
- Versions
- ≥ 16.0.0, < 16.0.1210.3: Affected (custom)
Update to 16.0.1210.3
microsoft sql server 2022 for x64-based systems (cu27)
- Versions
- ≥ 16.0.4003.1, < 16.0.4305.5: Affected (custom)
Update to 16.0.4305.5
microsoft sql server 2025 (cu8)
- Versions
- -: Affected
No fix published
microsoft sql server 2025 for x64-based systems (cu9)
- Versions
- ≥ 17.0.4006.2, < 17.0.5015.4: Affected (custom)
Update to 17.0.5015.4
microsoft sql server 2025 for x64-based systems (gdr)
- Versions
- ≥ 17.0.1050.2, < 17.0.1145.4: Affected (custom)
Update to 17.0.1145.4