Microsoft SQL Server SQL Server 2025 Update Version 17.0.1105.2
Views
38
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5077468 updates SQL Server 2025 to 17.0.1105.2 and fixes multiple elevation of privilege vulnerabilities: CVE-2026-21262, CVE-2026-26115, and CVE-2026-26116. It also includes security hardening for SQL injection and ALTER USER behavior.
Update Details
Security
- Fixes CVE-2026-21262, CVE-2026-26115, and CVE-2026-26116 elevation of privilege vulnerabilities.
- Fixes a potential SQL injection vulnerability by removing an internal system stored procedure.
- Fixes an elevation of privilege vulnerability in the version upgrade process for merge replication.
- Blocks
ALTER USERwhen the target login is the system Administrator account.
Hints
- Applies to SQL Server 2025 on Windows and Linux, all editions.
- Updated product version: 17.0.1105.2; file version: 2025.170.1105.2.
- A downloadable Excel workbook is referenced for build and fix details.
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2025
Version: 17.0.1105.2
Vendor information published: Mar 10, 2026
Original release notes: View on vendor site
Published on updatealert.io: Sep 29, 2026