CVE-2026-47296HighCVSS 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
🎯 Affected products10
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
- Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack
- Microsoft SQL Server 2017 for x64-based Systems (CU 31)
- Microsoft SQL Server 2017 for x64-based Systems (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU 32)
- Microsoft SQL Server 2019 for x64-based Systems (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU 25)
- Microsoft SQL Server 2022 for x64-based Systems (GDR)
- Microsoft SQL Server 2025 for x64-based Systems (CU6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
✅ Remediation
KB5101347 (Security Update) — fixed build 16.0.4262.2 KB5101346 (Security Update) — fixed build 17.0.4060.2 KB5102338 (Security Update) — fixed build 14.0.2120.1 KB5102336 (Security Update) — fixed build 15.0.2180.2 KB5102340 (Security Update) — fixed build 13.0.6500.1 KB5102339 (Security Update) — fixed build 13.0.7095.1 KB5102337 (Security Update) — fixed build 14.0.3540.1 KB5102334 (Security Update) — fixed build 16.0.1190.2 KB5102333 (Security Update) — fixed build 17.0.1125.2 KB5102335 (Security Update) — fixed build 15.0.4480.2
🔗 References (21)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296
- patchhttps://www.microsoft.com/download/details.aspx?familyid=2c52560b-6fd0-4ceb-8d60-0c540d910d01
- referencehttps://support.microsoft.com/help/5101347
- patchhttps://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e
- referencehttps://support.microsoft.com/help/5101346
- patchhttps://www.microsoft.com/download/details.aspx?familyid=fa1a9c50-337c-4351-88e3-0874a53e57bb
- referencehttps://support.microsoft.com/help/5102338
- patchhttps://www.microsoft.com/download/details.aspx?familyid=4f9970c0-88ef-4901-a471-851255f05be8
- referencehttps://support.microsoft.com/help/5102336
- patchhttps://www.microsoft.com/download/details.aspx?familyid=a84c7105-2738-4d87-bea7-29846cb384ae
- referencehttps://support.microsoft.com/help/5102340
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6a7d7b5b-d102-4114-b131-899859ecc3cc
- referencehttps://support.microsoft.com/help/5102339
- patchhttps://www.microsoft.com/download/details.aspx?familyid=22c8589d-8b4f-41a4-a7b3-072a8bd4aa3a
- referencehttps://support.microsoft.com/help/5102337
- patchhttps://www.microsoft.com/download/details.aspx?familyid=db5e12bd-676a-4324-b736-10053a1d34cf
- referencehttps://support.microsoft.com/help/5102334
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7
- referencehttps://support.microsoft.com/help/5102333
- patchhttps://www.microsoft.com/download/details.aspx?familyid=0a742248-b0b1-4008-87ac-32af17ce5f2c
- referencehttps://support.microsoft.com/help/5096773