CVE-2026-66309: Azure SQL Database Elevation of Privilege Vulnerability
Published Aug 20, 2026
·Updated
Azure SQL Database Elevation of Privilege Vulnerability
Other sources
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
1 affected component
Microsoft Azure SQL Database
Event History
Aug 20, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·09:47 PM
Data Sourced
via MITRE·09:47 PM
DescriptionSeverity
Frequently Asked Questions
1
Does an attacker need existing access to exploit this issue?
Yes. The vulnerability is described as requiring an authorized attacker, and the CVSS vector lists Privileges Required as High (PR:H). Exploitation is performed over the network and does not require user interaction.