Skip to the content
The Update Bureau
Security

KB5122774: all 45 vulnerabilities

Security update for SQL Server 2017, CU branch, September 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

45 vulnerabilities fixed
1 critical 44 important
VulnerabilitySeverityCVSS
CVE-2026-67631
Microsoft SQL Server Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-66814
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-66818
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-66819
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-66820
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67368
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67370
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67380
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67381
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67384
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67385
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67388
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67639
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-68775
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-68786
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-73028
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-77480
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-77481
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-77482
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-77483
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-77486
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-77487
SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-78442
Windows OLE DB Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-68787
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 7.8
CVE-2026-67376
Microsoft SQL Server Denial of Service Vulnerability
 Important 7.5
CVE-2026-77485
SQL Server Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-67386
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67390
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67393
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67629
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67630
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67633
Microsoft SQL Server Denial of Service Vulnerability
 Important 6.5
CVE-2026-67645
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67648
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68776
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68777
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68778
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68779
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68780
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68781
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-68784
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-69562
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-78441
Windows OLE DB Information Disclosure Vulnerability
 Important 6.5
CVE-2026-77488
Microsoft SQL Server Information Disclosure Vulnerability
 Important 5.5
CVE-2026-68785
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 4.9