CVE-2021-1636

HIGH EXPLOITED

Microsoft SQL Server - SQL Injection

Title source: llm

CVE-2021-1636 has been observed exploited in the wild (reported by VulnCheck KEV).

Microsoft SQL Elevation of Privilege Vulnerability

Core 2

Core References

Vendor Advisory vendor-advisory

Vendor Advisory

CVSS v3 8.8

EPSS 0.0615

EPSS Percentile 92.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

VulnCheck KEV 2022-02-24

CWE

CWE-89

Status published

Products (5)

microsoft/sql_server 2012 sp4

microsoft/sql_server 2014 sp3

microsoft/sql_server 2016 sp2

microsoft/sql_server 2017

microsoft/sql_server 2019

Published Jan 12, 2021

Tracked Since Feb 18, 2026