Views
92

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5084814 updates SQL Server 2025 to build 17.0.1110.1 / 2025.170.1110.1 and fixes two elevation-of-privilege vulnerabilities, including CVE-2026-32167 and CVE-2026-32176. It also includes a linked server security fix and a SQL Agent SQL injection-related privilege escalation fix.

Update Details

Security

  • Fixes CVE-2026-32167: SQL Server elevation of privilege vulnerability.
  • Fixes CVE-2026-32176: SQL Server elevation of privilege vulnerability.
  • Addresses an elevation of privilege issue in SQL Server linked servers that could allow a low-privileged user to gain sysadmin permission.
  • Fixes a SQL injection issue in SQL Server Agent that could allow an authorized attacker to elevate privileges over the network.

Known Issues

  • Linked server queries that use MSDASQL with a provider string (@provstr) can fail with error 7416: "Access to the remote server is denied because no login-mapping exists."
  • A stricter Database Engine connection validation check can reject some linked server configurations that use the MSDASQL provider.

Hints

  • Applies to SQL Server 2025 on Windows and Linux.
  • The update changes SQL Server to product version 17.0.1110.1 and file version 2025.170.1110.1.
  • Microsoft provides a downloadable Excel workbook with build summaries and detailed fix lists.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2025

Version: 17.0.1110.1 / 2025.170.1110.1

Vendor information published: Apr 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 29, 2026