Skip to the content
The Update Bureau
SQL Server 2016 SP3 + GDR SQL Server 2016 SP3 + GDR Security update
Patch Tuesday

KB5046063

KB5046063: Security update for SQL Server 2016, GDR branch, October 2024. CDC issues fixed; SQL Agent jobs can show an unknown-token error

In short

Fixes one Important SQL Server elevation-of-privilege vulnerability, CVE-2024-37341, and functional issues in Change Data Capture. SQL Agent jobs might show an “unknown token” error; KB5046856 is the fix.

Does it affect you? Applies to: Servers running SQL Server 2016 SP3 GDR. The update package is for x64 systems.

Build
13.0.6450.1
Servicing branch
GDR
Security
1 fixed
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • What changes This update fixes known Change Data Capture functional issues introduced in the September GDR; the official page does not say it resolves every possible issue with the feature.

The official sources are linked at the end of the page.

For servers on the GDR branch: they get security fixes only. Servers that install cumulative updates (CU branch) get a separate update. Which branch am I on?

What changes

Fix 1 change

Replication

  • Change Data Capture works correctly after functional issues introduced in the September GDR.1
    Fixes known functional issues in Change Data Capture (CDC); bug reference 3496757.

Known issues

  1. Open Affects: Organizations and IT administrators

    Symptoms

    After installing this update, SQL Agent jobs might show an “unknown token” error.2

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Open Affects: Organizations and IT administrators

    Resolution

    Apply KB5046856, the November 12, 2024 security update for the SQL Server 2016 SP3 Azure Connect Feature Pack, to fix the SQL Agent “unknown token” error.3

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Classification
Security Updates
Type
Cumulative update
Servicing branch
GDR
Restart
Required
Replaces
KB5042207, KB5040946
Replaced by
KB5046855
VersionBuildChannel
2016 13.0.6450.1 General availability

Security

1 vulnerability fixed
1 important
VulnerabilitySeverityCVSS
Microsoft SQL Server Elevation of Privilege Vulnerability
Important 8.8

Downloads (Microsoft Update Catalog)

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. Fixes known functional issues that occur in the Change Data Capture (CDC) feature and that were introduced in the September GDR. support.microsoft.com
  2. 2. After you apply this security update, you might experience an "unknown token" error in the SQL Agent jobs. support.microsoft.com
  3. 3. To fix this issue, apply the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: November 12, 2024 (KB5046856). support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake