CVE-2026-32176

نوع الضعف

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

المنتجات المتأثرة

• microsoft sql_server_2016
• microsoft sql_server_2017
• microsoft sql_server_2019
• microsoft sql_server_2022
• microsoft sql_server_2025

المراجع

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32176