Read the docs
Microsoft update

KB5128495

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority LOW 36

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2026-04-14 Fixed in 13.0.6485.1, 13.0.7080.1 +11 CWE-89