Views
6

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5101347 updates SQL Server 2022 to 16.0.4262.2 and fixes multiple vulnerabilities, including CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. It also includes fixes for a memory leak, replication input validation, and an SQL injection issue.

Update Details

Security

  • Fixes CVE-2026-47295: Microsoft SQL Server Elevation of Privilege Vulnerability.
  • Fixes CVE-2026-47296: Microsoft SQL Server Elevation of Privilege Vulnerability.
  • Fixes CVE-2026-54118: Microsoft SQL Server Remote Code Execution Vulnerability.
  • Fixes CVE-2026-55002: Microsoft SQL Server Elevation of Privilege Vulnerability.
  • Restricts SoapFormatter deserialization in MessageQueueTask to prevent remote code execution from untrusted MSMQ messages.
  • Addresses an SQL injection vulnerability in SQL Server that could allow an authenticated attacker to elevate privileges over a network.
  • Adds input validation and sanitization for a parameter passed to an internal replication stored procedure.

Bug Fixes

  • Fixes a memory leak when using sys.dm_exec_input_buffer or DBCC INPUTBUFFER.
  • Addresses input validation and sanitization issues in replication stored procedure handling.

Known Issues

  • Linked server queries that use MSDASQL with a provider string can fail with error 7416 due to stricter connection validation.

Hints

  • On Windows, enable encryption with Extended Protection to help secure SQL Server.
  • The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
  • For SQL Server 2022 on Linux, configure the Cumulative Update repository first, then update packages using the platform-specific command.
  • Installing this security update is optional for computers that do not host Microsoft SQL Server Reporting Services.

Links

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2022

Version: 16.0.4262.2

Vendor release date: Jul 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Aug 16, 2026