Microsoft Azure SQL Database vulnerabilities

Latest Microsoft Azure SQL Database CVEs

Newest publication first

1. CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability

   Published 2026-08-21

   Critical·CVSS 10.0

   Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

2. CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

   Published 2026-08-20

   Critical·CVSS 9.9

   Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

3. CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

   Published 2026-08-20

   Critical·CVSS 9.1

   Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

4. CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

   Published 2026-08-20

   Critical·CVSS 9.9

   Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

5. CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability

   Published 2026-08-11

   High·CVSS 7.8

   Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

6. CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability

   Published 2026-08-06

   Critical·CVSS 10.0

   Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.