Microsoft Azure Sql Database — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Sql Database, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-56162 — CVSS 10.0 (critical): Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-63522 — CVSS 7.8 (high): Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.