Skip to the content
The Update Bureau
SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update
Patch Tuesday

KB5128496

KB5128496: Security update for SQL Server 2017, CU branch, October 2026. Database Engine vulnerability fixes; MSDASQL queries can fail

In short

Fixes security vulnerabilities in SQL Server 2017, but linked server queries using MSDASQL and a provider string might fail with error 7416.

Does it affect you? Applies to: Devices running SQL Server 2017. The update applies to SQL Server 2017 or a SQL Server 2017 CU release through CU31 GDR; the package is for x64.

Build
14.0.3560.2
Servicing branch
CU
Security
14 fixed
Restart
Required

For servers on the CU branch: they install cumulative updates, which also bring fixes beyond security. Servers on the GDR branch (security fixes only) get a separate update. Which branch am I on?

What changes

Fixes 8 changes

Extensibility

For: Linux and Windows instances using Machine Learning Services or Language Extensions

  • Closes vulnerabilities that could corrupt or disclose memory when SQL Server processes certain protocol messages.1
    Fixes memory-corruption and memory-disclosure vulnerabilities in SQL Server SQL Satellite protocol message parsing used by Machine Learning Services and Language Extensions.

Backup Restore

2 items

For: Linux and Windows instances using VDI

  • Closes a vulnerability that could cause an out-of-bounds write when opening a virtual device set.2
    Fixes a security vulnerability in the SQL Server Virtual Device Interface (VDI).
  • Closes a vulnerability that could cause an out-of-bounds read or write during backup or restore data processing.3
    Fixes a security vulnerability in the SQL Server Virtual Device Interface (VDI).

Distributed Query

For: Linux and Windows instances using MSDASQL linked servers

  • MSDASQL linked server connections work when the provider string does not include a user ID.4
    Fixes MSDASQL linked server connections that fail if the provider string does not include a user ID (UID).

Replication

2 items
  • A data validation problem in replication operations is fixed.5
    Fixes an issue in replication operations that affects data validation.
  • A data validation problem in merge replication Web Synchronization operations is fixed.6
    Fixes an issue in merge replication Web Synchronization operations that affects data validation.

Programmability

For: Linux and Windows instances

  • Closes a vulnerability that could disclose information or cause a denial of service when a specially crafted SQL Trace file is read.7
    Fixes a security vulnerability triggered when the Database Engine reads a specially crafted SQL Trace file.

Extended Events

For: Linux and Windows instances

  • Closes vulnerabilities that could disclose information or cause a denial of service when a specially crafted Extended Events file is read.8
    Fixes security vulnerabilities triggered when the Database Engine reads a specially crafted Extended Events (.xel) file.

Improvements 7 changes

High Availability and Disaster Recovery

For: Linux and Windows Availability Group secondary replicas

  • Availability Group secondary replicas reject oversized FILESTREAM fragments.9
    Adds validation of FILESTREAM fragment size on Availability Group secondary replicas.

Replication

5 items
  • Queued Updating Subscriptions get security and reliability improvements.10
    Improves security and reliability for Queued Updating Subscriptions in Transactional Replication.
  • Queued Updating Subscriptions get security and reliability improvements.11
    Improves security and reliability for Queued Updating Subscriptions in Transactional Replication.
  • Authorization checks help prevent unintended disclosure of database information during certain replication-related operations.13
    Strengthens authorization checks for certain replication-related database operations.
  • Replication security metadata handling is more secure and reliable during Subscriber database restore and upgrade operations.14
    Improves security and reliability in replication security metadata handling during Subscriber database restore and upgrade operations.
  • The Log Reader Agent gets security and reliability improvements in heterogeneous transactional replication.15
    Improves security and reliability for the Log Reader Agent in a heterogeneous transactional replication scenario.

Query Store

For: Windows instances using Query Store

  • Showplan input handling gets security and reliability improvements.12
    Improves Showplan input handling to enhance security and reliability.

Known issues

  1. Open Affects: Everyone

    Linked server queries that use MSDASQL fail with error 7416

    Linked server queries using the MSDASQL provider and a provider string (@provstr) might fail with error 7416, even if earlier builds allowed the connection.16

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-10-13
Classification
Security Updates
Type
Cumulative update
Servicing branch
CU
Restart
Required
Replaces
KB5122774, KB5102337, KB5090354, KB5084818
+10 earlier KB5077471, KB5068402, KB5065225, KB5063759, KB5058714, KB5050533, KB5046858, KB5046061, KB5042215, KB5040940
Replaced by
KB5132746
VersionBuildChannel
2017 14.0.3560.2 General availability

Security

14 vulnerabilities fixed
9 important 5 not rated
VulnerabilitySeverityCVSS
CVE-2026-32176
SQL Server Elevation of Privilege Vulnerability
 Important 6.7
CVE-2026-67625
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-67628
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-68883
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-70189
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-85886
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-85888
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-88081
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-88085
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-83945
Microsoft SQL Server Remote Code Execution Vulnerability
 Not rated —
CVE-2026-88089
Microsoft SQL Server Remote Code Execution Vulnerability
 Not rated —
CVE-2026-94512
SQL Server Remote Code Execution Vulnerability
 Not rated —
CVE-2026-94520
Microsoft SQL Server Denial of Service Vulnerability
 Not rated —
CVE-2026-96956
SQL Server Elevation of Privilege Vulnerability
 Not rated —

Downloads (Microsoft Update Catalog)

Package 2017
543.1 MB
sqlserver2017-kb5128496-x64.exe Main update · KB5128496 SHA-1: 98106856…91d68c

Updated components

124 files changed since the previous update for the same versions.

Top changed componentsFiles
SQL Server Engine94
SQL Server PolyBase3

Page history

  1. Superseded by KB5132746

    Removed CVE-2026-88089

    Removed CVE-2026-94512

    Removed CVE-2026-94520

    Removed CVE-2026-96956

Sources

Updated
Cited passages from Microsoft's official notes (16)
  1. 1. Fixes multiple memory-corruption and memory-disclosure vulnerabilities in the SQL Server SQL Satellite protocol message parsing logic that's used by Machine Learning Services and Language Extensions. support.microsoft.com
  2. 2. Fixes a security vulnerability in the SQL Server Virtual Device Interface (VDI) in which an out-of-bounds write potentially occurs while opening a virtual device set. support.microsoft.com
  3. 3. Fixes a security vulnerability in the SQL Server Virtual Device Interface (VDI) in which an out-of-bounds read or write action potentially occurs while processing transferred data during backup or restore operations. support.microsoft.com
  4. 4. Fixes an issue in which MSDASQL linked server connections fail if the provider string does not include a user ID (UID). support.microsoft.com
  5. 5. Fixes an issue in replication operations that affects data validation. support.microsoft.com
  6. 6. Fixes an issue in merge replication Web Synchronization operations that affects data validation. support.microsoft.com
  7. 7. Fixes a security vulnerability that allows information disclosure or a denial of service when the Database Engine reads a specially crafted SQL Trace file. support.microsoft.com
  8. 8. Fixes several security vulnerabilities that allow information disclosure or a denial of service when the Database Engine reads a specially crafted Extended Events (.xel) file. support.microsoft.com
  9. 9. Adds validation of FILESTREAM fragment size on Availability Group secondary replicas to reject oversized fragments. support.microsoft.com
  10. 10. Improves security and reliability for Queued Updating Subscriptions in Transactional Replication. support.microsoft.com
  11. 11. Improves security and reliability for Queued Updating Subscriptions in Transactional Replication. support.microsoft.com
  12. 12. Improves Showplan input handling to enhance security and reliability. support.microsoft.com
  13. 13. Strengthens authorization checks for certain replication-related database operations to help prevent unintended disclosure of database information. support.microsoft.com
  14. 14. Improves security and reliability in replication security metadata handling during Subscriber database restore and upgrade operations. support.microsoft.com
  15. 15. Improves security and reliability for the Log Reader Agent in a heterogeneous transactional replication scenario. support.microsoft.com
  16. 16. Linked server queries that use the MSDASQL (OLE DB Provider for ODBC Drivers) provider and specify a provider string (@provstr) fail and return the following error message: support.microsoft.com
Checked automatically: 7 of 8 checks passed, 16 quoted passages · compared with Microsoft's page on Nov 14, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake