Skip to the content
The Update Bureau
SQL Server 2016 SP3 AC + GDR SQL Server 2016 SP3 AC + GDR Security update
Patch Tuesday

KB5058717

KB5058717: Security update for SQL Server 2016, Azure Connect Feature Pack branch, July 2025. Information disclosure flaw and setup restarts addressed

In short

The update addresses one publicly disclosed Important SQL Server information disclosure vulnerability and fixes a rare query execution issue plus SQL Setup restarts that could prevent setup from continuing.

Does it affect you? Applies to: Servers running SQL Server 2016 SP3 Azure Connect Feature Pack. The update package is for x64 systems.

Build
13.0.7055.9
Servicing branch
Azure Connect Feature Pack
Security
1 fixed
Restart
Required

For servers on the Azure Connect Feature Pack of Service Pack 3, the branch with fixes beyond security. Servers on the GDR branch (security fixes only) get a separate update. Which branch am I on?

What changes

Fixes 2 changes

Query Execution

  • In rare cases, variable length parameters no longer allow uninitialized memory to be read.1
    Fixes the issue in SQL Server Engine.

Patching

  • SQL Setup no longer encounters the restart issue that could prevent setup from continuing after a previous Windows update.2
    When SQL Server updates are applied, the value of the PendingFileRenameOperations registry key is deleted.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-07-08
Classification
Security Updates
Type
Cumulative update
Servicing branch
Azure Connect Feature Pack
Restart
Required
Replaces
KB5046856, KB5046062, KB5042209, KB5040944
Replaced by
KB5063761
VersionBuildChannel
2016 13.0.7055.9 General availability

Security

1 vulnerability fixed
1 important
VulnerabilitySeverityCVSS
CVE-2025-49719
Microsoft SQL Server Information Disclosure Vulnerability
 Important 7.5

Downloads (Microsoft Update Catalog)

Package 2016
482.5 MB
sqlserver2016-kb5058717-x64.exe Main update · KB5058717 SHA-1: d3a7532a…cac536

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. Fixes an issue in which uninitialized memory can be read in some rare cases when using variable length parameters. support.microsoft.com
  2. 2. Fixes an issue that was introduced in a previous Windows update that causes restarts and prevents Setup from continuing. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake