CVE-2021-1636
HIGH 1 PoC
MEDIUM
Priority: 0.59
BB Relevance:
79/100
Published: 2021-01-12
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Microsoft SQL Elevation of Privilege Vulnerability
Weakness Classification (1)
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| Microsoft | Microsoft SQL Server 2012 Service Pack 4 (QFE) | 11.0.0 < publication |
| Microsoft | Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) | 11.0.0 < publication |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (CU 4) | 12.0.0 < publication |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (GDR) | 12.0.0 < publication |
| Microsoft | Microsoft SQL Server 2016 Service Pack 2 (CU 15) | 13.0.0 < publication |
| Microsoft | Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) | 13.0.0 < publication |
| Microsoft | Microsoft SQL Server 2017 (CU 22) | 14.0.0 < publication |
| Microsoft | Microsoft SQL Server 2017 (GDR) | 14.0.0 < publication |
| Microsoft | Microsoft SQL Server 2019 (CU 8) | 16.0.0 < publication |
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 < publication |
| microsoft | sql_server | 2012 |
| microsoft | sql_server | 2014 |
| microsoft | sql_server | 2016 |
| microsoft | sql_server | 2017 |
| microsoft | sql_server | 2019 |