Views
7

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5102335 updates SQL Server 2019 to version 15.0.4480.2 and fixes multiple vulnerabilities, including CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. It also includes fixes for a linked server issue, a memory leak, and replication input validation.

Update Details

Security

  • Fixes an insecure deserialization issue in MessageQueueTask that could allow remote code execution from untrusted MSMQ messages.
  • Addresses SQL injection and privilege escalation risk in SQL Server Agent by improving input handling.
  • Fixes input validation and sanitization in an internal replication stored procedure.
  • CVE-2026-47295 - Microsoft SQL Server Elevation of Privilege Vulnerability
  • CVE-2026-47296 - Microsoft SQL Server Elevation of Privilege Vulnerability
  • CVE-2026-54118 - Microsoft SQL Server Remote Code Execution Vulnerability
  • CVE-2026-55002 - Microsoft SQL Server Elevation of Privilege Vulnerability
  • Enable encryption with Extended Protection on Windows to help secure SQL Server.

Bug Fixes

  • Fixes a memory leak when sys.dm_exec_input_buffer or DBCC INPUTBUFFER is used.
  • Fixes linked server query failures with MSDASQL provider string usage that can return error 7416.

Known Issues

  • Linked server queries that use MSDASQL with a provider string (@provstr) can fail with error 7416: access to the remote server is denied because no login-mapping exists.

Hints

  • Prerequisite: SQL Server 2019 or any SQL Server 2019 CU release through SQL Server 2019 CU32 GDR must already be installed.
  • On Linux, configure the Cumulative Update repository first, then update SQL Server packages using the platform-specific command.
  • The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
  • For Windows, Microsoft notes that installing this security update is optional on computers that do not host SQL Server Reporting Services.
  • Detection logic for Microsoft Update Catalog has been updated for this and future SQL Server security releases.

Links

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2019

Version: 15.0.4480.2

Vendor release date: Jul 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Aug 16, 2026