Skip to main content
Apexward Pulse
5 reportsPriority Low

Microsoft SQL Server Elevation of Privilege Vulnerabilities

Multiple vulnerabilities in Microsoft SQL Server could allow attackers to gain elevated privileges, posing a risk to UK organisations using the software.

First report Latest

What is going on

  • A vulnerability in Microsoft SQL Server allows an authorised attacker to elevate privileges over a network.
  • Another vulnerability in the same software enables an unauthorised attacker to elevate privileges over a network.
  • Both issues may affect Microsoft SQL Server and require confirmation of presence in affected estates.
  • A separate vulnerability in the Windows App Readiness Service allows local tampering by an authorised attacker.
  • Microsoft has also reported a vulnerability in the ActiveX Installer Service that could allow privilege elevation locally.
  • What to watch: Further details on the potential impact of these vulnerabilities on specific UK organisation systems.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed