Microsoft SQL Server Elevation of Privilege Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-118118 · score 8/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Microsoft SQL Server 2025 for x64-based Systems CU10, Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2019 for x64-based Systems (CU32), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU31)

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5129299, KB5132751, KB5132747, KB5132749, KB5129300, KB5132745. Official page.