Azure Sql Database (Microsoft) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-21. Vendor: Microsoft.

CVEs of Azure Sql Database

• CVE-2026-69502 - CVSS 10 (critical), 2026-08-21: Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-68782 - CVSS 9.9 (critical), 2026-08-20: Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges…
• CVE-2026-66309 - CVSS 9.1 (critical), 2026-08-20: Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
• CVE-2026-68789 - CVSS 9.9 (critical), 2026-08-20: Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges…
• CVE-2026-63522 - CVSS 7.8 (high), 2026-08-11: Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
• CVE-2026-56162 - CVSS 10 (critical), 2026-08-06: Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.