Microsoft update

KB5102339

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack 13.0.7095.1

Fixes 4 records

TI-2026-39042 CVE-2026-54118 · GHSA-c2qv-v7mm-7vwh

Microsoft SQL Server Remote Code Execution Vulnerability

MEDIUM 46

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-502

TI-2026-39709 CVE-2026-55002 · GHSA-84xv-35h8-r47j

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 42

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-73

TI-2026-34872 CVE-2026-47295 · GHSA-fxxm-g9hf-2q4h

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-89

TI-2026-34873 CVE-2026-47296 · GHSA-448r-r56x-9vhx

Microsoft SQL Server Elevation of Privilege Vulnerability

LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00691 Published 2026-07-14 Fixed in 13.0.6500.1, 13.0.7095.1 +8 CWE-89