CVE-2026-32167

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Apr 14, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-321687.8Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.CVE-2026-321699.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.CVE-2026-32176.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider all CVE-2026-321706.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.CVE-2026-321718.8Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.CVE-2026-321728.0Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.CVE-2026-321737.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.CVE-2026-321748.8Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.CVE-2026-321754.3A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vuln CVE-2026-321767.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate CVE-2026-321777.3Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-321787.5Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.