Microsoft SQL Server SQL Server 2017 Update Version 14.0.2100.4
Views
5
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5077472 updates SQL Server 2017 GDR to build 14.0.2100.4 and fixes elevation of privilege vulnerabilities. It addresses CVE-2026-21262 and CVE-2026-26115.
Update Details
Security
- Fixes an elevation of privilege vulnerability in the version upgrade process for merge replication.
- Blocks the
ALTER USERoperation if the target login is the system Administrator account. - CVE-2026-21262 - SQL Server Elevation of Privilege Vulnerability
- CVE-2026-26115 - SQL Server Elevation of Privilege Vulnerability
Hints
- Install any required language packs before applying the update; otherwise, the update must be reinstalled.
- The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
- Installing this security update is optional for computers that do not host Microsoft SQL Server Reporting Services.
- Prerequisite: SQL Server 2017 or any SQL Server 2017 GDR release through this GDR must already be installed.
Links
-
Microsoft Download Center package
https://www.microsoft.com/en-us/download/details.aspx?id=0
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2017
Version: 14.0.2100.4
Vendor release date: Mar 10, 2026
Original release notes: View on vendor site
Published on updatealert.io: Aug 16, 2026