Microsoft SQL Elevation of Privilege Vulnerability
Priority MEDIUM 56CWE-89Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-89.
Summary
Microsoft SQL Elevation of Privilege Vulnerability
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.06693 93rd percentileScored 2026-11-07
Fix Fixed Microsoft SQL Server 2012 Service Pack 4 (QFE) (Microsoft): publicationMicrosoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) (Microsoft): publication+8 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2012 Service Pack 4 (QFE) | 11.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) | 11.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2017 (GDR) | 14.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (GDR) | 12.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) | 13.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (CU 4) | 12.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2017 (CU 22) | 14.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2016 Service Pack 2 (CU 15) | 13.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2019 (CU 8) | 16.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 to before publication | publication | Patch available | CNA |
- Microsoft SQL Server 2012 Service Pack 4 (QFE) VendorMicrosoft Affected 11.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) VendorMicrosoft Affected 11.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2017 (GDR) VendorMicrosoft Affected 14.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2014 Service Pack 3 (GDR) VendorMicrosoft Affected 12.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) VendorMicrosoft Affected 13.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2014 Service Pack 3 (CU 4) VendorMicrosoft Affected 12.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2017 (CU 22) VendorMicrosoft Affected 14.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2016 Service Pack 2 (CU 15) VendorMicrosoft Affected 13.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2019 (CU 8) VendorMicrosoft Affected 16.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SQL Server 2019 (GDR) VendorMicrosoft Affected 15.0.0 to before publication Fixed in publication Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:* | 2012 sp4 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:* | 2014 sp3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:* | 2016 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:* | 2017 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:* | 2019 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:* Versions 2012 sp4 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:* Versions 2014 sp3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:* Versions 2016 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:* Versions 2017 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:* Versions 2019 Vulnerable ·Microsoft
Remediation
- Fix · CNA Microsoft SQL Server 2012 Service Pack 4 (QFE) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2017 (GDR) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2014 Service Pack 3 (GDR) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2014 Service Pack 3 (CU 4) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2017 (CU 22) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2016 Service Pack 2 (CU 15) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2019 (CU 8) (Microsoft) Fixed in publication
- Fix · CNA Microsoft SQL Server 2019 (GDR) (Microsoft) Fixed in publication
Timeline
- 2026-10-02 Threatist record created from CVE-2021-1636
- 2026-10-03 Alias added: GHSA-hmh6-2fr5-6q37
- 2026-11-02 Weakness changed · CISA ADP
- 2026-11-02 CISA SSVC decision points changed
References
More Microsoft Sql Server vulnerabilities
- TI-2020-00595 Deserialization of untrusted data in Microsoft SQL Server KEVCVSS 3.1CRITICAL 9.8
- TI-2019-00798 Improper input validation in Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems KEVCVSS 3.1HIGH 8.8
- TI-2012-01640 The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office… KEVCVSS 3.1HIGH 8.8
- TI-2008-05156 Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and… CVSS 2.0HIGH 9.0
- TI-2008-00076 Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop… CVSS 2.0HIGH 9.0
- TI-2002-00627 Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and… CVSS 2.0HIGH 7.5
Sources
- CVE-2021-1636 · CVE Program
- CVE-2021-1636 · NVD
- FIRST EPSS
- GHSA-hmh6-2fr5-6q37 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences