CVE Catalog

CVE-2026-63522

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user could gain higher privileges, potentially leading to unauthorized access to database data.

Recommendation

Review and correct permission configuration in Azure SQL Database.

Original NVD description (English source)

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS