DBCC stackdump invocation limited to sysadmins
Addresses the Important SQL Server elevation-of-privilege vulnerability CVE-2026-20803 and limits who can invoke a dump file through DBCC stackdump.
Check the newer update, KB5077468Key changes 1 CVE · 1 change
- Fix Security Infrastructure: Only sysadmins can invoke a dump file through DBCC stackdump.
- CVSS 7.2 CVE-2026-20803: Microsoft SQL Server Elevation of Privilege Vulnerability