Untrusted Pointer Dereference in Microsoft SQL Server - CVE-2026-116934
Published: November 11, 2026
Vulnerability identifier: #VU164997
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-116934
CWE-ID: CWE-822
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges in the SQL Server service context.
The vulnerability exists due to untrusted pointer dereference in Microsoft SQL Server when processing requests for an affected database operation. A remote user can send a specially crafted network request with permission to execute that operation to gain elevated privileges in the SQL Server service context.
Affected software
Microsoft SQL Server
How to mitigate CVE-2026-116934
Install security update from vendor's website.
Microsoft SQL Server - addressed in versions 14.0.3570.2, 15.0.2210.4, 15.0.4510.2, 16.0.1220.3, 16.0.4315.2, 17.0.1155.3, 17.0.5045.3