Microsoft update

KB5077468

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0.1105.2

Fixes 3 records

TI-2026-21109 CVE-2026-26115 · GHSA-xjf9-64j8-5qjg

SQL Server Elevation of Privilege Vulnerability

MEDIUM 43

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0125 Published 2026-03-10 Fixed in 13.0.6480.4, 13.0.7075.5 +8 CWE-1287

TI-2026-17169 CVE-2026-21262 · GHSA-wmrr-4347-6m3q

SQL Server Elevation of Privilege Vulnerability

MEDIUM 43

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01661 Published 2026-03-10 Fixed in 13.0.6480.4, 13.0.7075.5 +8 CWE-284

TI-2026-21110 CVE-2026-26116 · GHSA-qmc2-fr3x-59pg

SQL Server Elevation of Privilege Vulnerability

MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01187 Published 2026-03-10 Fixed in 17.0.4020.2, 17.0.1105.2 CWE-89