Security Updates for Microsoft SQL Server (March 2026)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A privilege escalation vulnerability CVE-2026-21262, CVE-2026-26115, CVE-2026-26116 Note that Nessus has not tested for these issues but has instea...

Patch Tuesday - March 2026

Microsoft is publishing 77 vulnerabilities this March 2026 Patch Tuesday. Microsoft is aware of public disclosure of two of today’s vulnerabilities, but without evidence of exploitation in the wild for any yet, so there are no Microsoft additions to CISA KEV today. Earlier in the month, Microsoft...

CVE-2026-21262

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-21262

CVE-2026-21262 affects Microsoft SQL Server and is a privilege-escalation vulnerability caused by improper access control. An authorized, network-present attacker with low privileges can elevate to sysadmin, potentially reading/changing data, creating accounts, or altering configurations, as desc...

KB5077468 - Description of the security update for SQL Server 2025 GDR: March 10, 2026

None None...

KB5077465 - Description of the security update for SQL Server 2022 GDR: March 10, 2026

None None...

KB5077471 - Description of the security update for SQL Server 2017 CU31: March 10, 2026

None None...

KB5077470 - Description of the security update for SQL Server 2019 GDR: March 10, 2026

None None...

KB5077464 - Description of the security update for SQL Server 2022 CU23: March 10, 2026

None None...

KB5077466 - Description of the security update for SQL Server 2025 CU2: March 10, 2026

None None...