Microsoft
SQL Server
See the latest tracked release, confirm when it was published, and subscribe for update emails.
CU24 + GDR (16.0.4250.1)
- Release date
- April 14, 2026
- CVE status
- 3 visible CVEs
Source
Vendor Release Information
Public release notes are linked for the latest stored release.
Release history
See the latest published releases stored for this product.
| Version | Published | Notes |
|---|---|---|
| CU24 + GDR (16.0.4250.1) | 2026-04-14 | Release Notes |
| CU24 (16.0.4245.2) | 2026-03-12 | Release Notes |
Vulnerability tracking
Review curated CVEs for this product and see whether the current version is marked affected. Only CVEs with a CVSS score of 7.0 or higher and published in the last 90 days are shown.
| CVE | Severity | Published | Status | Summary |
|---|---|---|---|---|
| CVE-2026-26116 | HIGH (8.8) | 2026-03-10 | Current versionnot affected | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. Affected versions
|
| CVE-2026-26115 | HIGH (8.8) | 2026-03-10 | Current versionnot affected | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. Affected versions
|
| CVE-2026-21262 | HIGH (8.8) | 2026-03-10 | Current versionnot affected | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. Affected versions
|