Views
6

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5084815 is a security update for SQL Server 2022 GDR that addresses elevation of privilege, SQL injection, and remote code execution vulnerabilities, including CVE-2026-32167, CVE-2026-32176, and CVE-2026-33120. It updates SQL Server 2022 to build 16.0.1175.1.

Update Details

Security

  • Fixes CVE-2026-32167: SQL Server elevation of privilege vulnerability.
  • Fixes CVE-2026-32176: SQL Server elevation of privilege vulnerability.
  • Fixes CVE-2026-33120: Microsoft SQL Server remote code execution vulnerability.
  • Addresses an elevation of privilege issue in SQL Server linked servers that could allow a low-privileged user to gain sysadmin permissions.
  • Resolves a SQL injection issue in SQL Server Agent that could allow an authorized attacker to elevate privileges over a network.
  • Fixes a specially crafted SQL query issue that could trigger a fatal access violation and cause a denial of service.

Bug Fixes

  • Fixes a fatal access violation triggered by a specially crafted SQL query that could stop SQL Server from responding.
  • Resolves a SQL injection issue in SQL Server Agent affecting privilege handling.
  • Addresses linked server privilege escalation behavior in SQL Server Engine.

Known Issues

  • Linked server queries that use MSDASQL with a provider string can fail with error 7416 because stricter connection validation may reject some linked server configurations.

Hints

  • Prerequisite: SQL Server 2022 or a SQL Server 2022 GDR release must already be installed.
  • If you install a language pack after this update, you must reinstall the update.
  • The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
  • Installing this security update is optional for computers that do not host Microsoft SQL Server Reporting Services.

Links

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2022

Version: 16.0.1175.1

Vendor release date: Apr 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Aug 16, 2026