Skip to the content
The Update Bureau
SQL Server 2019 CU28 + GDR SQL Server 2019 CU28 + GDR Security update
Patch Tuesday

KB5046060

KB5046060: Security update for SQL Server 2019, CU branch, October 2024. VSS Writer backup failures remain; privilege flaw fixed

In short

Fixes an important SQL Server elevation-of-privilege vulnerability and a CDC issue. Backups of some virtual machines might still fail because of a SQL Server VSS Writer issue.

Does it affect you? Applies to: SQL Server 2019 installations updated through CU28 GDR. The update package is for x64 systems; installing it is optional on computers that do not host SQL Server Reporting Services.

Build
15.0.4395.2
Servicing branch
CU
Security
1 fixed
Restart
Required

For servers on the CU branch: they install cumulative updates, which also bring fixes beyond security. Servers on the GDR branch (security fixes only) get a separate update. Which branch am I on?

What changes

Fix 1 change

Replication

For: SQL Server deployments using CDC

  • Change Data Capture (CDC) no longer has the functional issues introduced in the September GDR.1
    Fixes bug reference 3497591.

Known issues

  1. Open Affects: Organizations and IT administrators

    Issue two: SQL Server VSS Writer might fail to perform a backup because no database is available to freeze

    Backup tools such as Azure Recovery Vault might fail to create application-consistent backups of a virtual machine, sometimes without errors. SQL Server VSS Writer can enter a non-retryable error state when no database is available to freeze.2

    How to apply the workaround Workaround

    Roll back to SQL Server 2019 CU27, then perform the snapshot backup.2

    Step-by-step workaround instructions
    2 steps
    Show steps Hide steps
    Step-by-step procedure
    1. Roll back the package to SQL Server 2019 CU27.
    2. Perform the snapshot backup.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Classification
Security Updates
Type
Cumulative update
Servicing branch
CU
Restart
Required
Replaces
KB5042749, KB5039747, KB5040948, KB5037331
+3 earlier KB5035123, KB5036335, KB5033688
Replaced by
KB5046860
VersionBuildChannel
2019 15.0.4395.2 General availability

Security

1 vulnerability fixed
1 important
VulnerabilitySeverityCVSS
CVE-2024-37341
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8

Downloads (Microsoft Update Catalog)

Package 2019
880.5 MB
sqlserver2019-kb5046060-x64.exe Main update · KB5046060 SHA-1: 296f5155…4fc667

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. Fixes known functional issues that occur in the Change Data Capture (CDC) feature and that were introduced in the September GDR. support.microsoft.com
  2. 2. The issue arises from a code change in SQL Server 2019 CU28 that checks if a database is online and ready to be frozen. The current solution is to roll back to SQL Server 2019 CU27 and perform the snapshot backup. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake