Views
7

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5102334 updates SQL Server 2022 to version 16.0.1190.2 and fixes multiple vulnerabilities, including CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. It also addresses a linked server known issue with MSDASQL and includes engine, replication, SQL Agent, and Integration Services fixes.

Update Details

Security

  • Fixes CVE-2026-47295: Microsoft SQL Server Elevation of Privilege Vulnerability.
  • Fixes CVE-2026-47296: Microsoft SQL Server Elevation of Privilege Vulnerability.
  • Fixes CVE-2026-54118: SQL Server Remote Code Execution Vulnerability.
  • Fixes CVE-2026-55002: Microsoft SQL Server Elevation of Privilege Vulnerability.
  • Addresses an insecure deserialization issue in MessageQueueTask by restricting SoapFormatter deserialization to prevent remote code execution from untrusted MSMQ messages.
  • Fixes an SQL injection vulnerability in SQL Server that could allow an authenticated attacker to elevate privileges over a network.
  • Adds input validation and sanitization for a parameter passed to an internal replication stored procedure.

Bug Fixes

  • Fixes a memory leak when using sys.dm_exec_input_buffer or DBCC INPUTBUFFER.
  • Addresses input validation and sanitization issues in replication-related stored procedure handling.

Known Issues

  • Linked server queries that use MSDASQL with a provider string (@provstr) can fail with error 7416 due to stricter connection validation.

Hints

  • To help secure SQL Server on Windows, enable encryption with Extended Protection.
  • Prerequisite: SQL Server 2022 or any SQL Server 2022 GDR release through this GDR must already be installed.
  • The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
  • Installing the security update is optional for computers that do not host Microsoft SQL Server Reporting Services.

Links

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2022

Version: 16.0.1190.2

Vendor release date: Jul 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Aug 16, 2026