VDB
GCVE-110-NCSC-2026-476
GCVE-110-NCSC-2026-476
Advisory PublishedCVSS 8.0/10
Execution with unnecessary privileges in SQL Server enables an authorized attacker to elevate their privileges over a network, potentially compromising system security.
Weaknesses (CWE)
CWE-250Execution with Unnecessary PrivilegesCWE-77Improper Neutralization of Special Elements used in a CommandCWE-122Heap-based Buffer OverflowCWE-125Out-of-bounds ReadCWE-822Untrusted Pointer DereferenceCWE-126Buffer Over-readCWE-121Stack-based Buffer OverflowCWE-327Use of a Broken or Risky Cryptographic AlgorithmCWE-908Use of Uninitialized ResourceCWE-89Improper Neutralization of Special Elements used in an SQL CommandCWE-346Origin Validation ErrorCWE-94Improper Control of Generation of CodeCWE-294Authentication Bypass by Capture-replayCWE-347Improper Verification of Cryptographic SignatureCWE-749Exposed Dangerous Method or Function
Risk Scores
CVSS 3.1
8.0/10
High · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Microsoft | vers:unknown/* | — | — |
Aliases
CVE-2026-116929CVE-2026-116930CVE-2026-116931CVE-2026-116932CVE-2026-116933CVE-2026-116934CVE-2026-116935CVE-2026-116936CVE-2026-116937CVE-2026-116938CVE-2026-116939CVE-2026-116940CVE-2026-116941CVE-2026-116942CVE-2026-116943CVE-2026-116944CVE-2026-116945CVE-2026-116946CVE-2026-116947CVE-2026-118102CVE-2026-118103CVE-2026-118104CVE-2026-118105CVE-2026-118106CVE-2026-118108CVE-2026-118109CVE-2026-118110CVE-2026-118111CVE-2026-118112CVE-2026-118113CVE-2026-118114CVE-2026-118115CVE-2026-118116CVE-2026-118117CVE-2026-118118CVE-2026-118119CVE-2026-118120CVE-2026-62903CVE-2026-66813CVE-2026-67372CVE-2026-67374CVE-2026-67382CVE-2026-67387CVE-2026-67391CVE-2026-67632CVE-2026-67637CVE-2026-67646CVE-2026-68783CVE-2026-70003CVE-2026-84010CVE-2026-88111CVE-2026-94511CVE-2026-94513
References
Browse GCVE Records
851 records in the GCVE database · Updated November 12, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.