Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · Catalog

   Detected

   Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

2. Oct 13, 2026 · Catalog

   Updated

   Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Sources

• CVE.orgCVE-2026-85876

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-85876

  30-day exploitation probability 0.2%

  first.org
• NIST NVDCVE-2026-85876

  Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  nvd.nist.gov

References

• Reference · msrc.microsoft.com