cve 2026 42990

The cve 2026 42990 tag collects coverage of Microsoft’s elevation-of-privilege vulnerability in the Microsoft ODBC Driver for SQL Server. Current guidance focuses on inventorying every deployed copy of ODBC Driver 17 and 18, rather than checking only SQL Server hosts. Because the driver may be bundled with applications, management systems, integration services, and automation workers, administrators should identify affected client components across their environments. This tag is relevant to enterprise IT teams tracking the July 14, 2026 publication in Microsoft’s Security Update Guide and planning follow-up security work around deployed ODBC components.