The Microsoft SQL Server 2016 setup page contains links to downloads for SQL Server tools (such as SQL Server Management Studio, SQL Server Data Tool, and so on). However, these links are not secure HTTP-forward links and can be targets for "man-in-the-middle" attacks.


This fix is included in Service Pack 2 for SQL Server 2016.

About SQL Server 2016 builds

Each new build for SQL Server 2016 contains all the hotfixes and security fixes that were in the previous build. We recommend that you install the latest build for SQL Server 2016.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology Microsoft uses to describe software updates.

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!