CVE-2026-63522
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could gain higher privileges, potentially leading to unauthorized access to database data.
Recommendation
Review and correct permission configuration in Azure SQL Database.
Other vulnerabilities in Azure SQL Database
See all- CVE-2026-69502Critical
Server-Side Request Forgery (SSRF) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-68789Critical
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
- CVE-2026-68782Critical
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
- CVE-2026-66309Critical
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
- CVE-2026-56162Critical
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS