CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability

CVE-2021-1636 is fixed in 12 products on 1 platform, first by KB4583465, released January 12, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0669
93rd percentile

Where it's fixed

ProductFixed inFixReleased
Microsoft
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 4 (QFE) KB4583465 Jan 12, 2021
Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) KB4583465 Jan 12, 2021
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4) KB4583462 Jan 12, 2021
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) KB4583463 Jan 12, 2021
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU 4) KB4583462 Jan 12, 2021
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) KB4583463 Jan 12, 2021
Microsoft SQL Server 2016 Service Pack 2 for x64-based Systems (CU 15) KB4583461 Jan 12, 2021
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) KB4583460 Jan 12, 2021
Microsoft SQL Server 2017 for x64-based Systems (CU 22) KB4583457 Jan 12, 2021
Microsoft SQL Server 2017 for x64-based Systems (GDR) KB4583456 Jan 12, 2021
Microsoft SQL Server 2019 for x64-based Systems (CU 8) KB4583459 Jan 12, 2021
Microsoft SQL Server 2019 for x64-based Systems (GDR) KB4583458 Jan 12, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.