Not scored
CVE-2026-21262
SQL Server Elevation of Privilege Vulnerability
MicrosoftMicrosoft SQL Server 2016 Service Pack 3 (GDR)
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
2.1%probability of exploitation in the next 30 days
Higher than 81% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Coverage 9 articles · 9 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 10 Mar · 19:01 UTC | SANS ISC | Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) |
| Tue 10 Mar · 19:31 UTC | SecurityWeek | Microsoft Patches 83 Vulnerabilities |
| Tue 10 Mar · 22:03 UTC | Rapid7 | Patch Tuesday - March 2026 |
| Wed 11 Mar · 00:04 UTC | Security Affairs | Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs |
| Wed 11 Mar · 01:05 UTC | Krebs on Security | Microsoft Patch Tuesday, March 2026 Edition |
| Wed 11 Mar · 09:42 UTC | Infosecurity | Microsoft Fixes Two Publicly Disclosed Zero-Days |
| Wed 11 Mar · 09:42 UTC | The Hacker News | Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days |
| Wed 11 Mar · 11:13 UTC | Malwarebytes | March 2026 Patch Tuesday fixes two zero-day vulnerabilities |
| Wed 11 Mar · 11:43 UTC | SOCRadar | March 2026 Patch Tuesday: 83 Vulnerabilities, Two Publicly Disclosed Zero-Days |
- March 2026 Patch Tuesday: 83 Vulnerabilities, Two Publicly Disclosed Zero-DaysSOCRadar · mentions it in passing
- March 2026 Patch Tuesday fixes two zero-day vulnerabilitiesMalwarebytes
- Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-DaysThe Hacker News · mentions it in passing
- Microsoft Fixes Two Publicly Disclosed Zero-DaysInfosecurity
- Microsoft Patch Tuesday, March 2026 EditionKrebs on Security
- Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugsSecurity Affairs · mentions it in passing
- Patch Tuesday - March 2026Rapid7
- Microsoft Patches 83 VulnerabilitiesSecurityWeek · mentions it in passing
- Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)SANS ISC · first in our coverage · mentions it in passing