CVE-2016-7254

🗓️ 10 Nov 2016 07:00:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

Microsoft SQL Server 2012 SP2 and 2012 SP3 privilege elevation vulnerabilit

Reporter	Title	Published	Views	Family All 18
Tenable Nessus	Microsoft SQL Server 2012 SP2 11.0.5058.0 through 11.0.5387.0 Multiple Privilege Escalation (3194719)	12 Dec 201600:00	–	nessus
Tenable Nessus	Microsoft SQL Server 2012 SP3 11.0.6020.0 through 11.0.6247.0 Multiple Privilege Escalation (3194721)	12 Dec 201600:00	–	nessus
Tenable Nessus	MS16-136: Security Update for SQL Server (3199641) (uncredentialed check)	28 Feb 201900:00	–	nessus
Tenable Nessus	MS16-136: Security Update for SQL Server (3199641)	8 Nov 201600:00	–	nessus
CNVD	Microsoft SQL Server RDBMS Engine Elevation of Privilege Vulnerability	9 Nov 201600:00	–	cnvd
CVE	CVE-2016-7254	10 Nov 201606:16	–	cve
Cvelist	CVE-2016-7254	10 Nov 201606:16	–	cvelist
Microsoft KB	KB3194719 - MS16-136: Description of the security update for SQL Server 2012 Service Pack 2 GDR: November 8, 2016	8 Nov 201608:00	–	mskb
Microsoft KB	MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016	8 Nov 201608:00	–	mskb
Microsoft KB	KB3194724 - MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 CU: November 8, 2016	8 Nov 201608:00	–	mskb

NVD

Node

microsoft sql_serverMatch2012sp2

OR

microsoft sql_serverMatch2012sp3

Source	Link
securitytracker	www.securitytracker.com/id/1037250
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
securityfocus	www.securityfocus.com/bid/94061

06 May 2026 22:30Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

CVSS 38.8

EPSS0.16567

microsoft sql server privilege elevation vulnerability remote authenticated users