Microsoft update

KB5084814

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0.1110.1

Fixes 2 records

TI-2026-24712 CVE-2026-32176 · GHSA-vfhv-wjq9-p5qh

SQL Server Elevation of Privilege Vulnerability

LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2026-04-14 Fixed in 13.0.6485.1, 13.0.7080.1 +11 CWE-89

TI-2026-24703 CVE-2026-32167 · GHSA-g255-j628-fcw3

SQL Server Elevation of Privilege Vulnerability

LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00299 Published 2026-04-14 Fixed in 13.0.6485.1, 13.0.7080.1 +8 CWE-89