Skip to the content
The Update Bureau
Security

KB5122770: all 56 vulnerabilities

Security update for SQL Server 2025, GDR branch, September 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

56 vulnerabilities fixed
4 critical 52 important
VulnerabilitySeverityCVSS
CVE-2026-67631
Microsoft SQL Server Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-67643
Microsoft SQL Server Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-67378
Microsoft SQL Server Remote Code Execution Vulnerability
 Critical 9.0
CVE-2026-67636
Microsoft SQL Server Remote Code Execution Vulnerability
 Critical 9.0
CVE-2026-66814
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-66818
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-66819
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-66820
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67368
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67370
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67373
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67380
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67381
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67384
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67385
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67388
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67638
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67639
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67642
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-68775
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-68786
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-73028
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-77480
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-77481
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-77483
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-77484
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-77487
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67379
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.5
CVE-2026-47297
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.1
CVE-2026-68787
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 7.8
CVE-2026-67376
Microsoft SQL Server Denial of Service Vulnerability
 Important 7.5
CVE-2026-77485
SQL Server Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-66816
Microsoft SQL Server Security Feature Bypass Vulnerability
 Important 6.5
CVE-2026-67369
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67383
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67386
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67389
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67390
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67393
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67624
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67629
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67630
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67633
Microsoft SQL Server Denial of Service Vulnerability
 Important 6.5
CVE-2026-67641
Microsoft SQL Server Denial of Service Vulnerability
 Important 6.5
CVE-2026-67645
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67648
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68776
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68777
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68778
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68779
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68780
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68781
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68784
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-73029
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-77488
Microsoft SQL Server Information Disclosure Vulnerability
 Important 5.5
CVE-2026-68785
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 4.9