---
id: "CVE-2026-84010"
page: "https://infrastack.ai/live/CVE-2026-84010"
kind: "vulnerability"
aliases: ["CVE-2026-84010"]
title: "Microsoft SQL Server: exposed dangerous function lets a signed-in user gain higher privileges"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "SQL Server 2017", "fixed": ["14.0.2150.2", "14.0.3570.2"], "affected": "GDR 14.0.0 - <14.0.2150.2; CU31 14.0.3006.16 - <14.0.3570.2", "ecosystem": "vendor"}, {"name": "SQL Server 2019", "fixed": ["15.0.2210.4", "15.0.4510.2"], "affected": "GDR 15.0.0 - <15.0.2210.4; CU32 15.0.4003.23 - <15.0.4510.2", "ecosystem": "vendor"}, {"name": "SQL Server 2022", "fixed": ["16.0.1220.3", "16.0.4315.2"], "affected": "GDR 16.0.0 - <16.0.1220.3; CU27 16.0.4003.1 - <16.0.4315.2", "ecosystem": "vendor"}, {"name": "SQL Server 2025", "fixed": ["17.0.1155.3", "17.0.5045.3"], "affected": "GDR 17.0.1050.2 - <17.0.1155.3; CU10 17.0.4006.0 - <17.0.5045.3", "ecosystem": "vendor"}]
ecosystems: []
tags: ["database", "infrastructure", "microsoft", "self-hosted", "sql-server"]
not_affected_if: ["managed-hosting", "unknown"]
published_at: "2026-11-10T19:21:24+00:00"
first_seen_at: "2026-11-10T19:25:18+00:00"
updated_at: "2026-11-10T21:10:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84010", "first_seen_at": "2026-11-10T19:25:18+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84010", "first_seen_at": "2026-11-10T21:10:35+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-84010"]}]
exploit_sources: []
---

# Microsoft SQL Server: exposed dangerous function lets a signed-in user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-84010 (this .md is for agents)

SQL Server exposes a dangerous method or function to authorized users, so an attacker who already has an account can raise their privileges over the network. The sources give no further technical detail on the exact function or affected versions.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SQL Server 2017 affected GDR 14.0.0 - <14.0.2150.2; CU31 14.0.3006.16 - <14.0.3570.2 fixed 14.0.2150.2, 14.0.3570.2
- vendor:SQL Server 2019 affected GDR 15.0.0 - <15.0.2210.4; CU32 15.0.4003.23 - <15.0.4510.2 fixed 15.0.2210.4, 15.0.4510.2
- vendor:SQL Server 2022 affected GDR 16.0.0 - <16.0.1220.3; CU27 16.0.4003.1 - <16.0.4315.2 fixed 16.0.1220.3, 16.0.4315.2
- vendor:SQL Server 2025 affected GDR 17.0.1050.2 - <17.0.1155.3; CU10 17.0.4006.0 - <17.0.5045.3 fixed 17.0.1155.3, 17.0.5045.3

## How to check

Run SELECT @@VERSION (or SERVERPROPERTY('ProductVersion')) and compare with the fixed builds: 2017 GDR 14.0.2150.2 / CU31 14.0.3570.2; 2019 GDR 15.0.2210.4 / CU32 15.0.4510.2; 2022 GDR 16.0.1220.3 / CU27 16.0.4315.2; 2025 GDR 17.0.1155.3 / CU10 17.0.5045.3.

## Fix

Install the Microsoft SQL Server security update for your branch: 2017 GDR 14.0.2150.2 or CU31 14.0.3570.2; 2019 GDR 15.0.2210.4 or CU32 15.0.4510.2; 2022 GDR 16.0.1220.3 or CU27 16.0.4315.2; 2025 GDR 17.0.1155.3 or CU10 17.0.5045.3 (per NVD; confirm on MSRC).

## Timeline

- 2026-11-10T19:25:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-84010
- 2026-11-10T21:10:35+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-84010 — NVD (Microsoft CNA data, awaiting enrichment) gives CWE-749, CVSS 7.5, affected builds for SQL 2017/2019/2022/2025. MSRC page is JS-only and unreadable here, so nothing verified; specific function not disclosed; no exploitation info.

## Documents

- [describes] NVD CVE-2026-84010 (Microsoft CNA data) https://nvd.nist.gov/vuln/detail/CVE-2026-84010

## From the sources

Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_