AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-62836

Microsoft Azure SQL Managed Instance: privilege escalation

Microsoft

CVE-2026-62836 · Published Aug 7, 2026 · updated Aug 12, 2026

High8.7
No fix yet
Microsoft advisory

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

Affected versions

PackageAffectedFixed in
Azure SQL Managed Instance
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-923

More Microsoft advisories

All Microsoft
Critical 9.6Aug 7Microsoft SharePoint Online: cross-site scriptingCVE-2026-70332no fix yetCritical 9.1Aug 7Microsoft Azure Confidential Ledger: remote code executionCVE-2026-68823no fix yetCritical 10.0Aug 7Microsoft Teams: missing authorizationCVE-2026-65667no fix yetHigh 8.8Aug 7Microsoft Purview eDiscovery: improper access controlCVE-2026-65668no fix yetCritical 9.8Aug 7Microsoft 365 Admin Center: privilege escalationCVE-2026-62873no fix yetCritical 9.6Aug 7Microsoft Teams: improper authenticationCVE-2026-62896no fix yet