title: Microsoft SQL Elevation of Privilege Vulnerability
description: Microsoft SQL Elevation of Privilege Vulnerability
problem types: Elevation of Privilege
affected:
{
vendor: Microsoft
product: Microsoft SQL Server 2012 Service Pack 4 (QFE)
cpes: cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*
platforms: 32-bit Systems
versions:
version: 11.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
cpes: cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*
platforms: x64-based Systems
versions:
version: 11.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2017 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 14.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2014 Service Pack 3 (GDR)
cpes: [ cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x64:*,  cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:*]
platforms: [x64-based Systems, 32-bit Systems]
versions:
version: 12.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*
platforms: Unknown
versions:
version: 13.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2014 Service Pack 3 (CU 4)
cpes: [ cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:*,  cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x64:*]
platforms: [32-bit Systems, x64-based Systems]
versions:
version: 12.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2017 (CU 22)
cpes: cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 14.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2016 Service Pack 2 (CU 15)
cpes: cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 13.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 8)
cpes: cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 16.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 15.0.0, lessThan: publication, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
]