Security Updates for Microsoft SQL Server (March 2026)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A privilege escalation vulnerability CVE-2026-21262, CVE-2026-26115, CVE-2026-26116 Note that Nessus has not tested for these issues but has instea...

Patch Tuesday - March 2026

Microsoft is publishing 77 vulnerabilities this March 2026 Patch Tuesday. Microsoft is aware of public disclosure of two of today’s vulnerabilities, but without evidence of exploitation in the wild for any yet, so there are no Microsoft additions to CISA KEV today. Earlier in the month, Microsoft...

CVE-2026-21262

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-21262

CVE-2026-21262 affects Microsoft SQL Server and is a privilege-escalation vulnerability caused by improper access control. An authorized, network-present attacker with low privileges can elevate to sysadmin, potentially reading/changing data, creating accounts, or altering configurations, as desc...

CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability

...

KB5077464 - Description of the security update for SQL Server 2022 CU23: March 10, 2026

KB5077464 - Description of the security update for SQL Server 2022 CU23: March 10, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Summary Improvements and fixes included in this update How to obtain and install the update How to obtain or download th...

KB5077466 - Description of the security update for SQL Server 2025 CU2: March 10, 2026

KB5077466 - Description of the security update for SQL Server 2025 CU2: March 10, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Summary Improvements and fixes included in this update How to obtain and install the update How to obtain or download th...

KB5077465 - Description of the security update for SQL Server 2022 GDR: March 10, 2026

KB5077465 - Description of the security update for SQL Server 2022 GDR: March 10, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Summary Improvements and fixes included in this update How to obtain and install the update More information File...

KB5077470 - Description of the security update for SQL Server 2019 GDR: March 10, 2026

KB5077470 - Description of the security update for SQL Server 2019 GDR: March 10, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Summary Improvements and fixes included in this update How to obtain and install the update More information File information Information about...

KB5077468 - Description of the security update for SQL Server 2025 GDR: March 10, 2026

KB5077468 - Description of the security update for SQL Server 2025 GDR: March 10, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Summary Improvements and fixes included in this update How to obtain and install the update More information File...

KB5077471 - Description of the security update for SQL Server 2017 CU31: March 10, 2026

KB5077471 - Description of the security update for SQL Server 2017 CU31: March 10, 2026 Applies To SQL Server 2017 on Linux SQL Server 2017 on Windows Summary Improvements and fixes included in this update How to obtain and install the update More information File information Information about...