Read the docs
Microsoft update

KB5102333

Security Update

View on Microsoft →

Fixed in

Fixes 7 records

TI-2026-39042 CVE-2026-54118 · GHSA-c2qv-v7mm-7vwh

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 46

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-502
TI-2026-39041 CVE-2026-54117 · GHSA-hx3c-jrf3-3m7r

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 46

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2026-07-14 Fixed in 17.0.4060.2, 17.0.1125.2 CWE-502
TI-2026-39709 CVE-2026-55002 · GHSA-84xv-35h8-r47j

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-73
TI-2026-34872 CVE-2026-47295 · GHSA-fxxm-g9hf-2q4h

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-89
TI-2026-34873 CVE-2026-47296 · GHSA-448r-r56x-9vhx

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00691 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-89
TI-2026-39040 CVE-2026-54116 · GHSA-g4mf-v8c5-8rjm

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-07-14 Fixed in 17.0.4060.2, 17.0.1125.2 CWE-843
TI-2026-37204 CVE-2026-50468 · GHSA-89h6-3v24-5cwv

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-07-14 Fixed in 17.0.4060.2, 17.0.1125.2 CWE-126