Views
204

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5083245 updates SQL Server 2025 CU3 and addresses elevation of privilege vulnerabilities, including CVE-2026-32167 and CVE-2026-32176. It also includes build 17.0.4030.1 and fixes linked-server and SQL Agent security issues.

Update Details

Security

  • Fixes CVE-2026-32167: SQL Server elevation of privilege vulnerability.
  • Fixes CVE-2026-32176: SQL Server elevation of privilege vulnerability.
  • Addresses a linked-server elevation of privilege issue that could let a low-privileged SQL Server user gain sysadmin permissions.
  • Fixes a SQL injection issue in SQL Agent that could allow an authorized attacker to elevate privileges over the network.

Bug Fixes

  • Linked server queries that use MSDASQL with a provider string can fail with error 7416 due to stricter connection validation.

Known Issues

  • Linked server queries that use MSDASQL and specify a provider string (@provstr) may fail with error 7416: 'Access to the remote server is denied because no login-mapping exists.'

Hints

  • Applies to SQL Server 2025 on Windows and Linux.
  • Microsoft states that the update includes build 17.0.4030.1 (file version 2025.170.4030.1).
  • A downloadable Excel workbook with build and fix details is available from the release note.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2025

Version: 17.0.4030.1

Vendor information published: Apr 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 29, 2026