Microsoft SQL Server SQL Server 2019 Update Version 15.0.2165.1

KB5084817 is a security update for SQL Server 2019 GDR that fixes elevation-of-privilege vulnerabilities, including CVE-2026-32167 and CVE-2026-32176. It updates SQL Server 2019 to build 15.0.2165.1.

• Fixes an elevation of privilege vulnerability in SQL Server linked servers that could let a low-privileged user gain sysadmin permissions.
• Addresses SQL injection in SQL Agent that could allow an authorized attacker to elevate privileges over the network.
• CVE-2026-32167 - SQL Server Elevation of Privilege Vulnerability
• CVE-2026-32176 - SQL Server Elevation of Privilege Vulnerability

• Linked server queries that use MSDASQL with a provider string (@provstr) can fail with error 7416: 'Access to the remote server is denied because no login-mapping exists.'
• A stricter Database Engine connection validation check can reject some linked server configurations that use the MSDASQL provider.

• Prerequisite: SQL Server 2019 or any SQL Server 2019 GDR release through this GDR must already be installed.
• If you install a language pack after installing this update, reinstall the update.
• The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
• Installing this security update is optional for computers that do not host Microsoft SQL Server Reporting Services.

• Microsoft Download Center package
  https://www.microsoft.com/en-us/download/details.aspx?id=???

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2019

Version: 15.0.2165.1

Vendor information published: Apr 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Aug 16, 2026