---
id: "CVE-2026-116934"
page: "https://infrastack.ai/live/CVE-2026-116934"
kind: "vulnerability"
aliases: ["CVE-2026-116934"]
title: "Microsoft SQL Server: authorized user can escalate privileges over network"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["microsoft", "other", "sql-server"]
not_affected_if: []
published_at: "2026-11-10T19:19:24+00:00"
first_seen_at: "2026-11-10T19:24:46+00:00"
updated_at: "2026-11-10T19:30:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116934", "first_seen_at": "2026-11-10T19:24:46+00:00"}]
exploit_sources: []
---

# Microsoft SQL Server: authorized user can escalate privileges over network

Link for people: https://infrastack.ai/live/CVE-2026-116934 (this .md is for agents)

An untrusted pointer dereference in Microsoft SQL Server lets an attacker who already holds valid credentials raise their privileges. The attack can be launched over the network.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm the SQL Server build with `SELECT @@VERSION` and compare it against Microsoft's security update guide entry for this CVE

## Timeline

- 2026-11-10T19:24:46+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116934

## From the sources

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_