High7.8Microsoft Server Updated
Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-47296 Published Jul 14, 2026Updated by vendor Jul 14, 2026
Affected products & platforms
Microsoft ServerSQL Server
Summary
Microsoft SQL Server Elevation of Privilege Vulnerability Affected products named by the advisory: Microsoft SQL Server 2022; Microsoft SQL Server 2025; Microsoft SQL Server 2017; Microsoft SQL Server 2019; and 1 more. Affected products named by the advisory: Microsoft SQL Server 2016.
Affected versions
- Microsoft SQL Server 2016 Service Pack 3 (GDR) 13.0.0
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack 13.0.0
- Microsoft SQL Server 2017 (CU 31) 14.0.0
- Microsoft SQL Server 2017 (GDR) 14.0.0
- Microsoft SQL Server 2019 (CU 32) 15.0.0.0
- Microsoft SQL Server 2019 (GDR) 15.0.0
- Microsoft SQL Server 2022 (GDR) 16.0.0
- Microsoft SQL Server 2022 for x64-based Systems (CU 25) 16.0.4260.1
- Microsoft SQL Server 2025 (CU 6) 17.0.4060.2
- Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0.1050.2
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Fixed versions
- KB5101347 (build 16.0.4262.2)
- KB5101346 (build 17.0.4060.2)
- KB5102338 (build 14.0.2120.1)
- KB5102336 (build 15.0.2180.2)
- KB5102340 (build 13.0.6500.1)
- KB5102339 (build 13.0.7095.1)
- KB5102337 (build 14.0.3540.1)
- KB5102334 (build 16.0.1190.2)
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Install the applicable security update for your platform: KB5101347, KB5101346, KB5102338, KB5102336, KB5102340, KB5102339 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.