Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-32176

CVE-2026-32176: 1 tracked advisory record across MS Server. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

MS Server

1 advisory
  • Advisory severityMedium6.7

    Medium [CVE-2026-32176] SQL Server Elevation of Privilege Vulnerability

    CVE-2026-32176Source published Source updated

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. Affected products named by the advisory: Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft SQL Server 2017 (CU 31); Microsoft SQL Server 2017 (GDR); and 6 more. Affected products named by the advisory: Microsoft SQL Server 2019 (CU 32); Microsoft SQL Server 2019 (GDR); Microsoft SQL Server 2022 (GDR); Microsoft SQL Server 2022 for x64-based Systems (CU 24); and 2 more.

    Affected products in this advisory
    • Microsoft SQL Server 2016 Service Pack 3 (GDR)
    • Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
    • Microsoft SQL Server 2017 (CU 31)
    • Microsoft SQL Server 2017 (GDR)

    6 more entries in the full advisory.

    Source-reported affected versions
    • Microsoft SQL Server 2016 Service Pack 3 (GDR) 13.0.0 before 13.0.6485.1
    • Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack 13.0.0 before 13.0.7080.1
    • Microsoft SQL Server 2017 (CU 31) 14.0.0 before 14.0.3525.1
    • Microsoft SQL Server 2017 (GDR) 14.0.0 before 14.0.2105.1

    6 more entries in the full advisory.

    Source-reported fixed versions
    • 13.0.6485.1
    • 13.0.7080.1
    • 14.0.3525.1
    • 14.0.2105.1

    6 more entries in the full advisory.

    Mitigation guidance
    No mitigation guidance extracted; consult the source.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future MS Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features