{"affected":[{"platforms":["32-bit Systems"],"product":"Microsoft SQL Server 2012 Service Pack 4 (QFE)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"11.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"11.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2017 (GDR)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"14.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems","32-bit Systems"],"product":"Microsoft SQL Server 2014 Service Pack 3 (GDR)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"12.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"13.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft SQL Server 2014 Service Pack 3 (CU 4)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"12.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2017 (CU 22)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"14.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2016 Service Pack 2 (CU 15)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"13.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2019 (CU 8)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2019 (GDR)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"15.0.0","versionType":"custom"}]}],"cveId":"CVE-2021-1636","cwes":["CWE-89"],"description":"Microsoft SQL Elevation of Privilege Vulnerability","epss":{"date":"2026-11-02","percentile":0.93912,"score":0.06693},"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: microsoft","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"}],"modifiedAt":1793642329530,"publishedAt":1610480515000,"references":[{"source":"CNA: microsoft","tags":["vendor-advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1636"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1636"}],"remediation":[],"revision":"281767c1c336ed5ccd18bba3b60428aff5ff91495dab5088b8df24d0ef38dcf9","sources":[{"modifiedAt":1793642329530,"name":"CNA: microsoft","retrievedAt":1793642923940,"url":"https://www.cve.org/CVERecord?id=CVE-2021-1636"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642931702,"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-1636"}],"ssvc":{"assessedAt":1793642318273,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Microsoft SQL Elevation of Privilege Vulnerability","updatedAt":1793642931702}