updatealert.io Logo
Microsoft SQL Server SQL Server 2025 logo

Microsoft SQL Server SQL Server 2025 Update Version 17.0.4020.2 / 2025.170.4020.2

Views
85

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5077466 updates SQL Server 2025 CU2 to 17.0.4020.2 / 2025.170.4020.2 and fixes vulnerabilities including CVE-2026-21262, CVE-2026-26115, and CVE-2026-26116. It also includes security hardening for SQL injection, merge replication upgrade, and ALTER USER handling.

Update Details

Security

  • Fixes CVE-2026-21262: SQL Server elevation of privilege vulnerability.
  • Fixes CVE-2026-26115: SQL Server elevation of privilege vulnerability.
  • Fixes CVE-2026-26116: SQL Server elevation of privilege vulnerability.
  • Removes an internal system stored procedure to address a potential SQL injection vulnerability.
  • Fixes an elevation of privilege vulnerability in the version upgrade process for merge replication.
  • Blocks ALTER USER when the target login is the system Administrator account.

Hints

  • Applies to SQL Server 2025 on Windows and Linux, all editions.
  • Microsoft states the update can be obtained through the usual update channels and provides a downloadable Excel workbook with build and fix details.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2025

Version: 17.0.4020.2 / 2025.170.4020.2

Vendor information published: Mar 10, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 29, 2026

View All Updates