Vulnerabilities fixed in Microsoft SQL Server

Microsoft has fixed vulnerabilities in SQL Server. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges and potentially execute SQL Statements with Sysadmin privileges. For successful abuse, the malicious party must have prior authorizations as a user. Of th...

EUVD-2026-10684

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-10683

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26115

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26116

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-21262

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-21262

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-26115

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability

...

KB5077471 - Description of the security update for SQL Server 2017 CU31: March 10, 2026

None None...

KB5077470 - Description of the security update for SQL Server 2019 GDR: March 10, 2026

None None...

KB5077464 - Description of the security update for SQL Server 2022 CU23: March 10, 2026

None None...

KB5077474 - Description of the security update for SQL Server 2016 SP3 GDR: March 10, 2026

None None...

KB5077473 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: March 10, 2026

None None...

KB5077469 - Description of the security update for SQL Server 2019 CU32: March 10, 2026

None None...

KB5077466 - Description of the security update for SQL Server 2025 CU2: March 10, 2026

None None...

KB5077472 - Description of the security update for SQL Server 2017 GDR: March 10, 2026

None None...