Azure Sql Database

azure_sql_database

Vendor: Microsoft • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-69502 1Microsoft 1Azure Sql Database Sep 4, 2026 Aug 21, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-68789 1Microsoft 1Azure Sql Database Aug 24, 2026 Aug 20, 2026 N/A· v4 9.9 CRITICAL· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-68782 1Microsoft 1Azure Sql Database Aug 24, 2026 Aug 20, 2026 N/A· v4 9.9 CRITICAL· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-66309 1Microsoft 1Azure Sql Database Aug 24, 2026 Aug 20, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-63522 1Microsoft 1Azure Sql Database Aug 17, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
CVE-2026-56162 1Microsoft 1Azure Sql Database Aug 8, 2026 Aug 7, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.