Microsoft SQL Server SQL Server 2019 Update Version 15.0.4480.2
Views
312
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5102335 updates SQL Server 2019 to version 15.0.4480.2 and fixes multiple vulnerabilities, including CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. It also includes fixes for a linked server issue, a memory leak, and replication input validation.
Update Details
Security
- Fixes an insecure deserialization issue in
MessageQueueTaskthat could allow remote code execution from untrusted MSMQ messages. - Addresses SQL injection and privilege escalation risk in SQL Server Agent by improving input handling.
- Fixes input validation and sanitization in an internal replication stored procedure.
- CVE-2026-47295 - Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-47296 - Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-54118 - Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-55002 - Microsoft SQL Server Elevation of Privilege Vulnerability
- Enable encryption with Extended Protection on Windows to help secure SQL Server.
Bug Fixes
- Fixes a memory leak when
sys.dm_exec_input_bufferorDBCC INPUTBUFFERis used. - Fixes linked server query failures with MSDASQL provider string usage that can return error 7416.
Known Issues
- Linked server queries that use MSDASQL with a provider string (
@provstr) can fail with error 7416: access to the remote server is denied because no login-mapping exists.
Hints
- Prerequisite: SQL Server 2019 or any SQL Server 2019 CU release through SQL Server 2019 CU32 GDR must already be installed.
- On Linux, configure the Cumulative Update repository first, then update SQL Server packages using the platform-specific command.
- The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
- For Windows, Microsoft notes that installing this security update is optional on computers that do not host SQL Server Reporting Services.
- Detection logic for Microsoft Update Catalog has been updated for this and future SQL Server security releases.
Links
-
Microsoft Download Center package
https://www.microsoft.com/en-us/download/details.aspx?id=0
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2019
Version: 15.0.4480.2
Vendor information published: Jul 14, 2026
Original release notes: View on vendor site
Published on updatealert.io: Aug 16, 2026