Microsoft SQL Server SQL Server 2017 Update Version 14.0.2100.4
Views
105
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5077472 updates SQL Server 2017 GDR to build 14.0.2100.4 and fixes elevation of privilege vulnerabilities. It addresses CVE-2026-21262 and CVE-2026-26115.
Update Details
Security
- Fixes an elevation of privilege vulnerability in the version upgrade process for merge replication.
- Blocks the
ALTER USERoperation if the target login is the system Administrator account. - CVE-2026-21262 - SQL Server Elevation of Privilege Vulnerability
- CVE-2026-26115 - SQL Server Elevation of Privilege Vulnerability
Hints
- Install any required language packs before applying the update; otherwise, the update must be reinstalled.
- The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
- Installing this security update is optional for computers that do not host Microsoft SQL Server Reporting Services.
- Prerequisite: SQL Server 2017 or any SQL Server 2017 GDR release through this GDR must already be installed.
Links
-
Microsoft Download Center package
https://www.microsoft.com/en-us/download/details.aspx?id=0
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2017
Version: 14.0.2100.4
Vendor information published: Mar 10, 2026
Original release notes: View on vendor site
Published on updatealert.io: Aug 16, 2026