{
  "cveId": "CVE-2016-7253",
  "url": "https://patchblox.com/security/cve/CVE-2016-7253",
  "summary": "CVE-2016-7253 is fixed in 16 products on 1 platform, first by KB3194725, released May 27, 2020. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Microsoft SQL Server Agent Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003EAn elevation of privilege vulnerability exists in Microsoft SQL Server Engine when SQL Server Agent incorrectly checks ACLs on atxcore.dll. An attacker could exploit the vulnerability if the attacker\u0027s credentials allow access to an affected SQL server database.\u003C/p\u003E\n\u003Cp\u003EAn attacker who successfully exploited the vulnerability could gain elevated privileges that could be used to view, change, or delete data; or create new accounts.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how SQL Server Engine handles ACLs.\u003C/p\u003E",
  "published": "2020-05-27T07:00:00Z",
  "severity": "Important",
  "epss": 0.11859,
  "epssPercentile": 0.96112,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "N/A",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7253",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 (CU)",
      "fixedVersion": "",
      "fix": "KB3194725",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194725",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 (GDR)",
      "fixedVersion": "",
      "fix": "KB3194719",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194719",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3  (GDR)",
      "fixedVersion": "",
      "fix": "KB3194721",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194721",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 (CU)",
      "fixedVersion": "",
      "fix": "KB3194724",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194724",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for x64-based Systems Service Pack 2 (CU)",
      "fixedVersion": "",
      "fix": "KB3194725",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194725",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for x64-based Systems Service Pack 2 (GDR)",
      "fixedVersion": "",
      "fix": "KB3194719",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194719",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for x64-based Systems Service Pack 3 (CU)",
      "fixedVersion": "",
      "fix": "KB3194724",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194724",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2012 for x64-based Systems Service Pack 3 (GDR)",
      "fixedVersion": "",
      "fix": "KB3194721",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194721",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 1 for 32-bit Systems (CU)",
      "fixedVersion": "",
      "fix": "KB3194722",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194722",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 1 for 32-bit Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB3194720",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194720",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 1 for x64-based Systems (CU)",
      "fixedVersion": "",
      "fix": "KB3194722",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194722",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 1 for x64-based Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB3194720",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194720",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU)",
      "fixedVersion": "",
      "fix": "KB3194718",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194718",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB3194714",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194714",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (CU)",
      "fixedVersion": "",
      "fix": "KB3194718",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194718",
      "released": "2020-05-27T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)",
      "fixedVersion": "",
      "fix": "KB3194714",
      "url": "https://patchblox.com/security/fix/microsoft/kb3194714",
      "released": "2020-05-27T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-06T17:00:54Z"
}