CVE-2026-63522

Microsoft · Published August 6, 2026

7.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure SQL Database Elevation of Privilege Vulnerability. Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

Affected Products

Azure SQL Database

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C