Back to search

Microsoft

SQL Server

See the latest tracked release, confirm when it was published, and subscribe for update emails.

2025 CU Switch to this train 2025 GDR Switch to this train 2022 CU Switch to this train 2022 GDR Switch to this train 2019 CU Switch to this train 2019 GDR Current train 2017 CU Switch to this train 2017 GDR Switch to this train 2016 SP3 GDR Switch to this train 2012 GDR Switch to this train 2005 SP4 CU Switch to this train 2005 SP2 GDR Switch to this train 2005 RTM GDR Switch to this train
Current version
Last checked: 2026-09-04

GDR (15.0.2180.2)

Release date
July 14, 2026
Security status
4 high-severity CVEs tracked in the last 90 days. Current version not affected.

Source

Vendor Release Information

Public release notes are linked for the latest stored release.

View release notes Subscribe to updates

Release history

See the latest published releases stored for this product.

Version Published Notes
GDR (15.0.2180.2) 2026-07-14 Release Notes
GDR (15.0.2170.1) 2026-05-12 Release Notes
GDR (15.0.2165.1) 2026-04-14 Release Notes
GDR (15.0.2160.4) 2026-03-10 Release Notes

Vulnerability tracking

versionPing monitors CVEs for this product. Matching CVEs are listed below. We only display CVEs with a CVSS score of 7.0 or higher that were published within the last 90 days.

Affected status is inferred from published affected version ranges where available. Always verify against the vendor advisory before making production decisions.

CVE Severity Published Status Summary
CVE-2026-47295 HIGH (8.8) 2026-07-14 Current versionnot affected

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected versions
  • From (including) 15.0.0 - Up to (excluding) 15.0.2180.2
CVE-2026-55002 HIGH (8.8) 2026-07-14 Current versionnot affected

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected versions
  • From (including) 15.0.0 - Up to (excluding) 15.0.2180.2
CVE-2026-54118 CRITICAL (9.8) 2026-07-14 Current versionnot affected

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Affected versions
  • From (including) 15.0.0 - Up to (excluding) 15.0.2180.2
CVE-2026-47296 HIGH (7.5) 2026-07-14 Current versionnot affected

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected versions
  • From (including) 15.0.0 - Up to (excluding) 15.0.2180.2