← Back

CVE-2016-7253

nvd nist
Published: Nov 10, 2016Modified: May 6, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Server Agent Elevation of Privilege Vulnerability."

Affected (4)

Microsoft
1 product
Sql Server
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Sql Server
Version 2012 sp2
Sql Server
Version 2012 sp3
Sql Server
Version 2014 sp1
Sql Server
Version 2014 sp2

Related CWEs

CWE-264
CWE-264

References (6)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.