Microsoft SQL Server Vulnerability Allows Attackers to Elevate Privileges over a Network

Microsoft released patches for CVE-2026-20803, an elevation-of-privilege vulnerability in SQL Server (affecting SQL Server 2022 and 2025) that could let authenticated users with elevated permissions bypass authentication to gain debugging access and dump memory. The flaw is tracked at CVSS 7.2 (Important), was assessed as "Less Likely" to be exploited at publication, and Microsoft recommends applying the provided GDR/CU updates and restricting administrative access while patching.