Microsoft update

KB5084815

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2022 for x64-based Systems (GDR) 16.0.1175.1

Fixes 3 records

TI-2026-25552 CVE-2026-33120 · GHSA-9xc5-8cgr-5wjf

Microsoft SQL Server Remote Code Execution Vulnerability

MEDIUM 41

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2026-04-14 Fixed in 16.0.1175.1 CWE-822

TI-2026-24712 CVE-2026-32176 · GHSA-vfhv-wjq9-p5qh

SQL Server Elevation of Privilege Vulnerability

LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2026-04-14 Fixed in 13.0.6485.1, 13.0.7080.1 +11 CWE-89

TI-2026-24703 CVE-2026-32167 · GHSA-g255-j628-fcw3

SQL Server Elevation of Privilege Vulnerability

LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00299 Published 2026-04-14 Fixed in 13.0.6485.1, 13.0.7080.1 +8 CWE-89