Microsoft SQL Server SQL Server 2019 Update Version 15.0.2190.7

KB5122773 updates SQL Server 2019 to 15.0.2190.7 and fixes many security vulnerabilities, including elevation of privilege, remote code execution, information disclosure, and denial of service issues. It also includes reliability and security fixes for PolyBase, replication, Extended Events, SQL Agent, XML, and other engine components.

• Fixes numerous CVEs affecting SQL Server 2019, including elevation of privilege, remote code execution, information disclosure, and denial of service vulnerabilities.
• Strengthens security validation in Microsoft Entra authentication login handling.
• Improves security checks for replication stored procedures and replication data handling.
• Hardens Extended Events processing to reduce memory corruption, information disclosure, and denial of service risk.
• Prevents PolyBase services from opening raw TCP listeners when modified command-line parameters are used.
• Improves security validation for SQL Server Agent, SQL WMI Provider, Showplan input, and internal event data handling.
• Addresses improper input validation and buffer validation issues that could lead to memory corruption, out-of-bounds writes, or privilege escalation.

• Fixes malformed or undersized backup metadata handling in the SQL Server VSS Writer.
• Addresses malformed TDS and Binary XML input handling.
• Fixes several In-Memory OLTP issues involving malformed DBCS varchar input, NVARCHAR conversion/truncation, and heap buffer overwrite conditions.
• Fixes XML processing issues, including large OPTION (USE PLAN) XML declarations, DTD attribute lists, and crafted XML format files used with OPENROWSET(BULK...) or BULK INSERT.
• Improves handling of queued updating subscriptions in transactional replication.
• Fixes replication stored procedure issues involving identifier handling, special characters, path values, and parameter validation.
• Addresses a class ID lookup issue that could read arbitrary memory.
• Fixes SQL Server Agent reliability issues under specific operating conditions.

• Linked server queries that use MSDASQL with a provider string can fail with error 7416 because stricter connection validation may reject certain linked server configurations.

• Release date: September 8, 2026.
• Version updated to 15.0.2190.7 (file version 2019.150.2190.7).
• Microsoft recommends enabling encryption with Extended Protection to help secure SQL Server on Windows.
• The update is available through Windows Update and installs automatically when automatic updating is enabled.
• A downloadable Excel workbook is available with build summaries and detailed fix lists.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2019

Version: 15.0.2190.7

Vendor information published: Sep 8, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 26, 2026