CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability

Description

Microsoft SQL Elevation of Privilege Vulnerability

Link	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1636	vendor advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1636

What is the severity of CVE-2021-1636?: CVE-2021-1636 has been scored as a high severity vulnerability.
How to fix CVE-2021-1636?: To fix CVE-2021-1636, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-1636 being actively exploited in the wild?: It is possible that CVE-2021-1636 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-1636?: CVE-2021-1636 affects Microsoft Microsoft SQL Server 2012 Service Pack 4 (QFE), Microsoft Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE), Microsoft Microsoft SQL Server 2017 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 (GDR), Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 (CU 4), Microsoft Microsoft SQL Server 2017 (CU 22), Microsoft Microsoft SQL Server 2016 Service Pack 2 (CU 15), Microsoft Microsoft SQL Server 2019 (CU 8), Microsoft Microsoft SQL Server 2019 (GDR).