Microsoft SQL Server SQL Server 2019 Update Version 15.0.4480.2
Views
7
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5102335 updates SQL Server 2019 to version 15.0.4480.2 and fixes multiple vulnerabilities, including CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. It also includes fixes for a linked server issue, a memory leak, and replication input validation.
Update Details
Security
- Fixes an insecure deserialization issue in
MessageQueueTaskthat could allow remote code execution from untrusted MSMQ messages. - Addresses SQL injection and privilege escalation risk in SQL Server Agent by improving input handling.
- Fixes input validation and sanitization in an internal replication stored procedure.
- CVE-2026-47295 - Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-47296 - Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-54118 - Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-55002 - Microsoft SQL Server Elevation of Privilege Vulnerability
- Enable encryption with Extended Protection on Windows to help secure SQL Server.
Bug Fixes
- Fixes a memory leak when
sys.dm_exec_input_bufferorDBCC INPUTBUFFERis used. - Fixes linked server query failures with MSDASQL provider string usage that can return error 7416.
Known Issues
- Linked server queries that use MSDASQL with a provider string (
@provstr) can fail with error 7416: access to the remote server is denied because no login-mapping exists.
Hints
- Prerequisite: SQL Server 2019 or any SQL Server 2019 CU release through SQL Server 2019 CU32 GDR must already be installed.
- On Linux, configure the Cumulative Update repository first, then update SQL Server packages using the platform-specific command.
- The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
- For Windows, Microsoft notes that installing this security update is optional on computers that do not host SQL Server Reporting Services.
- Detection logic for Microsoft Update Catalog has been updated for this and future SQL Server security releases.
Links
-
Microsoft Download Center package
https://www.microsoft.com/en-us/download/details.aspx?id=0
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2019
Version: 15.0.4480.2
Vendor release date: Jul 14, 2026
Original release notes: View on vendor site
Published on updatealert.io: Aug 16, 2026