High8.8Vendor: CriticalMicrosoft Server Updated
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-54118 Published Jul 14, 2026Updated by vendor Jul 14, 2026
Affected products & platforms
Microsoft ServerSQL Server
Summary
Microsoft SQL Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft SQL Server 2016; Microsoft SQL Server 2019; Microsoft SQL Server 2022; Microsoft SQL Server 2017; and 1 more. Affected products named by the advisory: Microsoft SQL Server 2025.
Affected versions
- Microsoft SQL Server 2016 Service Pack 3 (GDR) 13.0.0
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack 13.0.0
- Microsoft SQL Server 2017 (CU 31) 14.0.0
- Microsoft SQL Server 2017 (GDR) 14.0.0
- Microsoft SQL Server 2019 (CU 32) 15.0.0.0
- Microsoft SQL Server 2019 (GDR) 15.0.0
- Microsoft SQL Server 2022 (GDR) 16.0.0
- Microsoft SQL Server 2022 for x64-based Systems (CU 25) 16.0.4260.1
- Microsoft SQL Server 2025 (CU 6) 17.0.4060.2
- Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0.1050.2
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Fixed versions
- KB5102339 (build 13.0.7095.1)
- KB5102336 (build 15.0.2180.2)
- KB5102334 (build 16.0.1190.2)
- KB5102337 (build 14.0.3540.1)
- KB5102335 (build 15.0.4480.2)
- KB5101347 (build 16.0.4262.2)
- KB5102333 (build 17.0.1125.2)
- KB5101346 (build 17.0.4060.2)
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Install the applicable security update for your platform: KB5102339, KB5102336, KB5102334, KB5102337, KB5102335, KB5101347 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.