CVE-2026-85876

HighCVSS 7.0/10Last modified Oct 16, 2026

Description

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-858778.8Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.CVE-2026-858789.9Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.CVE-2026-858797.0Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locallyCVE-2026-858807.8Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.CVE-2026-858818.0Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.CVE-2026-858847.8Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate prCVE-2026-858858.8Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevateCVE-2026-858868.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-858877.7Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.CVE-2026-858887.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-858899.8Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.CVE-2026-85898.7GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2
CVE-2026-85876: High severity, CVSS 7.0 | Vulnix