CVE-2026-85876

Description

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Traduire en français

Produits concernés

• Microsoft SQL Server 2019 (GDR)
• Microsoft SQL Server 2019 for x64-based Systems (CU32)
• Microsoft SQL Server 2022 (GDR)
• Microsoft SQL Server 2022 for x64-based Systems (CU27)
• Microsoft SQL Server 2025 (CU8)
• Microsoft SQL Server 2025 for x64-based Systems (CU9)
• Microsoft SQL Server 2025 for x64-based Systems (GDR)

Scores CVSS

Faiblesses (CWE)

• CWE-416

Références

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories