Views
5

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5077464 updates SQL Server 2022 CU23 to build 16.0.4240.4 and fixes two elevation-of-privilege vulnerabilities: CVE-2026-21262 and CVE-2026-26115. It also includes security fixes for merge replication upgrade and ALTER USER handling.

Update Details

Security

  • Fixes CVE-2026-21262 and CVE-2026-26115, both SQL Server elevation-of-privilege vulnerabilities.
  • Fixes an elevation-of-privilege vulnerability in the version upgrade process for merge replication.
  • Blocks ALTER USER when the target login is the system Administrator account.

Bug Fixes

  • Fixes the version upgrade process for merge replication.
  • Blocks ALTER USER for the system Administrator account target login.

Hints

  • Prerequisite: SQL Server 2022 or any SQL Server 2022 CU release through CU23 GDR must already be installed.
  • If you install a language pack after installing this update, you must reinstall the update.
  • For Linux, the Cumulative Update repository must be configured before updating to the latest CU.
  • Installing this security update is optional for computers that do not host Microsoft SQL Server Reporting Services.

Links

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2022

Version: 16.0.4240.4

Vendor release date: Mar 10, 2026

Original release notes: View on vendor site

Published on updatealert.io: Aug 16, 2026