CVE-2026-77480

HighCVSS 8.8/10Last modified Sep 15, 2026

Description

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1220

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 15, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-774818.8Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-774828.8Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-774838.8Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-774848.8Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-774857.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.CVE-2026-774868.8Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-774878.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-774885.5Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.CVE-2026-774897.8Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-77498.8A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cCVE-2026-774906.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorizCVE-2026-774915.5Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
CVE-2026-77480: High severity, CVSS 8.8 | Vulnix