Skip to content
VulniPulse
Advisory severityHigh8.0Microsoft Server

High [CVE-2026-96956] SQL Server Elevation of Privilege Vulnerability

This high-severity Microsoft Server advisory covers CVE-2026-96956 affecting Microsoft SQL Server 2017, Microsoft SQL Server 2019, Microsoft SQL Server 2022.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-96956 Source published Source updated

VulniPulse record published Record updated

Affected products & platforms
Microsoft ServerSQL Server
Open source advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Summary

SQL Server Elevation of Privilege Vulnerability

Affected products named by the advisory: Microsoft SQL Server 2017; Microsoft SQL Server 2019; Microsoft SQL Server 2022; Microsoft SQL Server 2025.

Affected versions
  • Microsoft SQL Server 2017 (GDR) 14.0.0 before 14.0.2140.2
  • Microsoft SQL Server 2017 for x64-based Systems (CU31) 14.0.3006.16 before 14.0.3560.2
  • Microsoft SQL Server 2019 (GDR) 15.0.0 before 15.0.2200.2
  • Microsoft SQL Server 2019 for x64-based Systems (CU32) 15.0.4003.23 before 15.0.4500.2
  • Microsoft SQL Server 2022 (GDR) 16.0.0 before 16.0.1210.3
  • Microsoft SQL Server 2022 for x64-based Systems (CU27) 16.0.4003.1 before 16.0.4305.5
  • Microsoft SQL Server 2025 for x64-based Systems (CU9) 17.0.4006.2 before 17.0.5015.4
  • Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0.1050.2 before 17.0.1145.4

Official advisory · high-confidence parse· fetched 8 days ago·verify at source

Fixed versions
  • KB5128496 (build 14.0.3560.2)
  • KB5128497 (build 14.0.2140.2)
  • KB5128495 (build 15.0.2200.2)
  • KB5126934 (build 16.0.4305.5)
  • KB5128492 (build 17.0.1145.4)
  • KB5126967 (build 17.0.5015.4)
  • KB5128494 (build 15.0.4500.2)
  • KB5128493 (build 16.0.1210.3)

Official advisory · high-confidence parse· fetched 8 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Install the applicable security update for your platform: KB5128496, KB5128497, KB5128495, KB5126934, KB5128492, KB5126967 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 8 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.