Microsoft has released SQL Server 2019 CU32 + GDR (KB5102335), which updates SQL Server 2019 to build 15.0.4480.2. Microsoft describes the package as a security update that contains fixes and resolves vulnerabilities, and it includes four verified fixes across the engine and Integration Services.

The release also notes one known issue affecting linked server queries that use MSDASQL with a provider string. In that scenario, queries can fail with Msg 7416 because the Database Engine may reject the connection under a stricter validation check.

Known issues

Microsoft lists one known issue for this release:

  • Linked server queries that use MSDASQL can fail with error 7416 when a provider string (@provstr) is specified. The documented behavior is that access to the remote server is denied because no login-mapping exists. Microsoft says this is tied to stricter connection validation in the Database Engine for certain linked server configurations that use the MSDASQL provider.

Improvements and fixes

Microsoft verified 4 fixes in this update. The changes are spread across several areas:

  • Integration Services: A fix restricts SoapFormatter deserialization in MessageQueueTask by using an allow-list binder, addressing insecure deserialization behavior associated with untrusted MSMQ messages.
  • Query execution: A memory leak is fixed for scenarios that use sys.dm_exec_input_buffer or the DBCC INPUTBUFFER command.
  • Replication: Input passed to an internal replication stored procedure is now validated and sanitized before use.
  • SQL Agent: A SQL injection issue is addressed where improper neutralization of special elements in SQL Server commands could allow an authenticated attacker to elevate privileges over a network.

Update details

  • KB: KB5102335
  • Release: CU32 + GDR
  • SQL Server version: 2019
  • Build: 15.0.4480.2
  • Release date: 2026-07-14

This update is part of Microsoft’s SQL Server update history for SQL Server 2019.

Official source