Microsoft update

KB5077473

Monthly Rollup

Fixed in

Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack 13.0.7075.5

TI-2026-21109 CVE-2026-26115 · GHSA-xjf9-64j8-5qjg

MEDIUM 43

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0125 Published 2026-03-10 Fixed in 13.0.6480.4, 13.0.7075.5 +8 CWE-1287

TI-2026-17169 CVE-2026-21262 · GHSA-wmrr-4347-6m3q

MEDIUM 43

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01661 Published 2026-03-10 Fixed in 13.0.6480.4, 13.0.7075.5 +8 CWE-284