Microsoft SQL Server Elevation of Privilege Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely CVE-2026-94513 · score 8/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2025 for x64-based Systems CU10

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5132747, KB5132748, KB5129300, KB5129299. Official page.