Microsoft SQL Server SQL Server 2019 Update Version 15.0.4470.1
Views
94
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5090407 updates SQL Server 2019 CU32 to build 15.0.4470.1 and fixes CVE-2026-40370, a remote code execution vulnerability. It also addresses an XML external entity issue in the Web Service Task.
Update Details
Security
- CVE-2026-40370 - SQL Server Remote Code Execution Vulnerability
- Fixes an XML external entity (XXE) vulnerability in the Web Service Task that could allow arbitrary file reads or denial of service.
Known Issues
- Linked server queries that use MSDASQL with a provider string can fail with error 7416 because stricter connection validation may reject some linked server configurations.
Hints
- Applies to SQL Server 2019 on Windows and SQL Server 2019 on Linux.
- To apply this update, SQL Server 2019 or any SQL Server 2019 CU release through CU32 GDR must already be installed.
- If you install a language pack after installing this update, you must reinstall the update.
- For Linux, the Cumulative Update repository must be configured before updating to the latest CU.
Links
-
Microsoft Download Center package
https://www.microsoft.com/en-us/download/details.aspx?id=...
-
Microsoft Update Catalog
https://catalog.update.microsoft.com/
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2019
Version: 15.0.4470.1
Vendor information published: May 12, 2026
Original release notes: View on vendor site
Published on updatealert.io: Aug 16, 2026