KB5046063: Security update for SQL Server 2016, GDR branch, October 2024. CDC issues fixed; SQL Agent jobs can show an unknown-token error
Fixes one Important SQL Server elevation-of-privilege vulnerability, CVE-2024-37341, and functional issues in Change Data Capture. SQL Agent jobs might show an “unknown token” error; KB5046856 is the fix.
Does it affect you? Applies to: Servers running SQL Server 2016 SP3 GDR. The update package is for x64 systems.
Review notes Additional details from the official release notes (1) Read note
- What changes This update fixes known Change Data Capture functional issues introduced in the September GDR; the official page does not say it resolves every possible issue with the feature.
The official sources are linked at the end of the page.
For servers on the GDR branch: they get security fixes only. Servers that install cumulative updates (CU branch) get a separate update. Which branch am I on?
What changes
Fix 1 change
Replication
-
Change Data Capture works correctly after functional issues introduced in the September GDR.1
Fixes known functional issues in Change Data Capture (CDC); bug reference 3496757.
Known issues
-
Symptoms
After installing this update, SQL Agent jobs might show an “unknown token” error.2
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
-
Resolution
Apply KB5046856, the November 12, 2024 security update for the SQL Server 2016 SP3 Azure Connect Feature Pack, to fix the SQL Agent “unknown token” error.3
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-10-08
- Classification
- Security Updates
- Type
- Cumulative update
- Servicing branch
- GDR
- Restart
- Required
- Replaces
- KB5042207, KB5040946
- Replaced by
- KB5046855
| Version | Build | Channel |
|---|---|---|
| 2016 | 13.0.6450.1 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SQL Server Elevation of Privilege Vulnerability
|
Important | 8.8 |
Downloads (Microsoft Update Catalog)
Sources
Cited passages from Microsoft's official notes (3)
-
1.
Fixes known functional issues that occur in the Change Data Capture (CDC) feature and that were introduced in the September GDR.
support.microsoft.com -
2.
After you apply this security update, you might experience an "unknown token" error in the SQL Agent jobs.
support.microsoft.com -
3.
To fix this issue, apply the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: November 12, 2024 (KB5046856).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake