{"id":"CVE-2026-116698","kind":"vulnerability","aliases":["CVE-2026-116698"],"related":[],"title":"Microsoft WDAC OLE DB provider for SQL: network code execution flaw","description":"Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.","summary":"Use-after-free in the Microsoft WDAC OLE DB provider for SQL lets an unauthenticated attacker run code over a network. Microsoft rates it Important (CVSS 7.5) and says it is not exploited or publicly disclosed, with exploitation less likely. Attack complexity is high and the CVSS vector requires user interaction (UI:R). Customer action is required: install the November 2026 Windows security update.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ole-db","sql-server","vendor","wdac","windows"],"not_affected_if":[],"how_to_check":"Microsoft's record does not list builds. Open the Security Updates table on the MSRC page for CVE-2026-116698 and compare your Windows build (winver) to the fixed build for your edition. Systems whose apps use the WDAC OLE DB provider for SQL (MSOLEDBSQL, SQLOLEDB) to connect to untrusted servers deserve first look.","fix":null,"status":"open","published_at":"2026-11-10T19:19:11+00:00","first_seen_at":"2026-11-10T19:24:44+00:00","triaged_at":"2026-11-10T19:44:55+00:00","updated_at":"2026-11-10T23:41:09+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T19:44:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft WDAC OLE DB provider for SQL: network code execution flaw","impact":"high","summary":"A use-after-free bug in the Microsoft WDAC OLE DB provider for SQL lets an unauthorized attacker run code over a network. NVD rates it high, with a CVSS score of 7.5.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["windows","sql-server","ole-db"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"attacker runs code on a machine using the provider","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-116698 to confirm affected Windows builds, the fixed update and any default-config details.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000641,"input_tokens":4502,"output_tokens":381,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-116698 to confirm affected Windows builds, the fixed update and any default-config details.","search":"'-116698':14A,17A '-2026':13A,16A '2026':88B '7.5':54B 'action':82B 'allow':103C 'attack':43B,68B,106C 'code':9A,45B,109C 'complex':69B 'custom':81B 'cve':12A,15A 'cvss':53B,74B 'db':4A,20B,36B,99C 'disclos':63B 'execut':10A,108C 'exploit':60B,65B 'flaw':11A 'free':30B,94C 'high':71B 'import':52B 'instal':85B 'interact':78B 'less':66B 'let':40B 'like':67B 'microsoft':1A,33B,49B,96C 'network':8A,48B,112C 'novemb':87B 'ole':3A,19B,35B,98C 'ole-db':18B 'provid':5A,37B,100C 'public':62B 'r':80B 'rate':50B 'requir':76B,84B 'run':44B 'say':56B 'secur':90B 'server':23B 'sql':7A,22B,39B,102C 'sql-server':21B 'ui':79B 'unauthent':42B 'unauthor':105C 'updat':91B 'use':28B,92C 'use-after-fre':27B 'user':77B 'vector':75B 'vendor':24B 'wdac':2A,25B,34B,97C 'window':26B,89B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","oledb","sqlserver","vendor","wdac","windows"],"campaign_type":null,"search_a":"'-116698':14A,17A '-2026':13A,16A 'code':9A 'cve':12A,15A 'db':4A 'execut':10A 'flaw':11A 'microsoft':1A 'network':8A 'ole':3A 'provid':5A 'sql':7A 'wdac':2A","search_b":"'2026':88B '7.5':54B 'action':82B 'attack':43B,68B 'code':45B 'complex':69B 'custom':81B 'cvss':53B,74B 'db':20B,36B 'disclos':63B 'exploit':60B,65B 'free':30B 'high':71B 'import':52B 'instal':85B 'interact':78B 'less':66B 'let':40B 'like':67B 'microsoft':33B,49B 'network':48B 'novemb':87B 'ole':19B,35B 'ole-db':18B 'provid':37B 'public':62B 'r':80B 'rate':50B 'requir':76B,84B 'run':44B 'say':56B 'secur':90B 'server':23B 'sql':22B,39B 'sql-server':21B 'ui':79B 'unauthent':42B 'updat':91B 'use':28B 'use-after-fre':27B 'user':77B 'vector':75B 'vendor':24B 'wdac':25B,34B 'window':26B,89B","search_c":"'allow':103C 'attack':106C 'code':109C 'db':99C 'execut':108C 'free':94C 'microsoft':96C 'network':112C 'ole':98C 'provid':100C 'sql':102C 'unauthor':105C 'use':92C 'wdac':97C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116698","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116698","severity":null,"published_at":"2026-11-10T19:19:11+00:00","modified_at":"2026-11-10T19:19:11+00:00","first_seen_at":"2026-11-10T19:24:44+00:00","fetched_at":"2026-11-10T19:24:44+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116698:3213","url":"https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-116698","severity":null,"published_at":"2026-11-10T23:41:09+00:00","modified_at":"2026-11-10T23:41:09+00:00","first_seen_at":"2026-11-10T23:41:09+00:00","fetched_at":"2026-11-10T23:41:09+00:00","note":"MSRC record read via SUG API (Nov 2026 release): UAF CWE-416, Important, CVSS 7.5 AV:N/AC:H/PR:N/UI:R, not exploited, not publicly disclosed, Exploitation Less Likely. Record has no build list or KB numbers; fix and affected builds unknown. Settle by opening the MSRC page Security Updates table in a browser. VulnFeed lists Windows 10 1607 among affected.","cites":["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-116698"]}],"documents":[{"id":120420,"url":"https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-116698","title":"MSRC Security Update Guide: CVE-2026-116698 (API record)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}