The Update BureauKB5046061: Security update for SQL Server 2017, CU branch, October 2024. Replication CDC issues fixed alongside an elevation-of-privilege flaw
Resolves an important SQL Server elevation-of-privilege vulnerability and fixes functional issues in Change Data Capture that the September GDR introduced.
Does it affect you? Applies to: Computers running SQL Server 2017. The update package is for x64 systems; installing it is optional on computers that do not host SQL Server Reporting Services.
For servers on the CU branch: they install cumulative updates, which also bring fixes beyond security. Servers on the GDR branch (security fixes only) get a separate update. Which branch am I on?
What changes
Fix 1 change
Replication
-
Change Data Capture functional issues introduced by the September GDR are fixed.1
Fixes known functional issues in Change Data Capture (CDC).
Improvement 1 change
Microsoft Update Catalog
- The update detection logic changes for this and future security releases in the Microsoft Update Catalog.2
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-10-08
- Classification
- Security Updates
- Type
- Cumulative update
- Servicing branch
- CU
- Restart
- Required
- Replaces
- KB5042215, KB5040940
- Replaced by
- KB5046858
| Version | Build | Channel |
|---|---|---|
| 2017 | 14.0.3480.1 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SQL Server Elevation of Privilege Vulnerability
|
Important | 8.8 |
Downloads (Microsoft Update Catalog)
Sources
Cited passages from Microsoft's official notes (2)
-
1.
Fixes known functional issues that occur in the Change Data Capture (CDC) feature and that were introduced in the September GDR.
support.microsoft.com -
2.
The detection logic has been updated for this and future security releases that are posted to the Microsoft Update Catalog website.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake