Microsoft has published SQL Server 2019 CU32 + GDR (KB5077469), a security update that advances SQL Server to build 15.0.4460.4. The release notes say the update contains fixes and addresses vulnerabilities, and the verified changes here focus on two security-related items in the SQL Server Engine.
What this release covers
This update is centered on security work rather than broad feature changes. Microsoft lists 2 verified fixes for SQL Server 2019:
- a fix for an elevation-of-privilege issue in the version upgrade process for merge replication on Windows
- a hotfix that blocks ALTER USER when the target login is the system Administrator account on Linux and Windows
Microsoft’s release notes also tie this update to two security advisories:
- CVE-2026-21262
- CVE-2026-26115
Improvements and fixes
The verified fixes in KB5077469 fall into two practical areas:
Replication
- Replication version upgrade process: Microsoft says the update fixes an elevation-of-privilege vulnerability in the version upgrade process for merge replication on Windows. The associated bug reference is 4973080.
Security infrastructure
- ALTER USER handling: Microsoft says the hotfix blocks ALTER USER if the target login is the system Administrator account. This applies to Linux and Windows. The associated bug reference is 4914052.
Known issues
Microsoft does not list any known issues in the release notes for this update.
Build information
- KB: KB5077469
- Update name: CU32 + GDR
- Product version: SQL Server 2019
- Build: 15.0.4460.4