ResolvedSQL Server 2022 (all editions)
Microsoft Patches SQL Server 2022 Analysis Services RCE and Database Engine Escalation in KB5089900
Microsoft released KB5089900 on May 12, 2026, a security update for SQL Server 2022 CU24 patching CVE-2026-0234 (privilege escalation), CVE-2026-0235 (SSAS RCE), CVE-2026-0236 (SSRS info disclosure), and CVE-2026-0237 (DoS).