March 2026 SQL Server Security Updates

On Patch Tuesday, in addition to OS and Office security patches, Microsoft also released patches for SQL Server to address privilege escalation vulnerabilities in supported versions. Time to patch!

SQL Server 2016:

• SQL Server 2016 SP3

SQL Server 2017:

• SQL Server 2017 RTM + GDR
• SQL Server 2017 CU31 + GDR

SQL Server 2019:

• SQL Server 2019 RTM + GDR
• SQL Server 2019 CU32 + GDR

SQL Server 2022:

• SQL Server 2022 RTM + GDR
• SQL Server 2022 CU23 + GDR

SQL Server 2025

• SQL Server 2025 RTM + GDR
• SQL Server 2025 CU2 + GDR

These address the following security vulnerabilities:

• CVE-2026-26115 – SQL Server Elevation of Privilege Vulnerability
• CVE-2026-26116 – SQL Server Elevation of Privilege Vulnerability
• CVE-2026-21262 – SQL Server Elevation of Privilege Vulnerability (publicly disclosed)