Skip to the content
The Update Bureau
Security

KB5129299: all 59 vulnerabilities

Security update for SQL Server 2025, CU branch, November 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

59 vulnerabilities fixed
57 important 2 not rated
VulnerabilitySeverityCVSS
CVE-2026-116929
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-116930
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116931
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116932
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-116933
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116934
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-116935
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-116936
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116937
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116938
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116939
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-116940
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-116941
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116942
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116943
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-116944
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-116945
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116946
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-116947
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-118102
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-118103
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-118104
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-118105
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118106
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-118108
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118109
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118110
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118111
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118112
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118113
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118114
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118115
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118116
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118117
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118118
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118119
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118120
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-66813
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-67372
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-67374
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-67382
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-67387
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-67391
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-67632
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-67637
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-67646
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-68781
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-68783
Microsoft SQL Server Information Disclosure Vulnerability
 Important —
CVE-2026-83945
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-84010
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-88089
Microsoft SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-88111
SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-94511
SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-94512
SQL Server Remote Code Execution Vulnerability
 Important —
CVE-2026-94513
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-94520
Microsoft SQL Server Denial of Service Vulnerability
 Important —
CVE-2026-96956
SQL Server Elevation of Privilege Vulnerability
 Important —
CVE-2026-118107
Not rated —
CVE-2026-67375
Microsoft SQL Server Elevation of Privilege Vulnerability
 Not rated —