ResolvedSQL Server 2019 (Windows)
KB5090407 Patches CVSS 8.8 Path Manipulation RCE in SQL Server 2019 CU32
KB5090407 patches CVE-2026-40370 (CVSS 8.8 RCE via path manipulation) in SQL Server 2019 CU32. Build 15.0.4470.1. MSDASQL linked server queries with @provstr fail with Msg 7416 after installation.