high7.0
CVE-2026-77485
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Impact
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sql Server 2017 | before 14.0.2130.4 from 14.0.3006.16 before 14.0.3550.4 |
| Microsoft | Sql Server 2019 | before 15.0.2190.7 from 15.0.4003.23 before 15.0.4490.9 |
| Microsoft | Sql Server 2022 | before 16.0.1200.5 from 16.0.4003.1 before 16.0.4275.2 |
| Microsoft | Sql Server 2025 | before 17.0.1135.8 from 17.0.4006.2 before 17.0.4085.5 |