Skip to the content
The Update Bureau
Security

KB5132749: all 48 vulnerabilities

Security update for SQL Server 2017, GDR branch, November 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

48 vulnerabilities fixed
44 important 4 not rated
VulnerabilitySeverityCVSS
CVE-2026-116945
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 9.8
CVE-2026-116930
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-116941
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-116946
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-118105
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-118109
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-118110
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-118120
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67374
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67387
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.8
CVE-2026-67391
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67632
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-67637
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-94511
SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-94512
SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2026-118106
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 8.1
CVE-2026-66813
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.1
CVE-2026-118111
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-118112
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-118113
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-118117
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-118118
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-118119
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-96956
SQL Server Elevation of Privilege Vulnerability
 Important 8.0
CVE-2026-116929
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.5
CVE-2026-116931
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 7.5
CVE-2026-116943
Microsoft SQL Server Information Disclosure Vulnerability
 Important 7.5
CVE-2026-116947
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 7.5
CVE-2026-118108
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.5
CVE-2026-118114
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.5
CVE-2026-118115
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.5
CVE-2026-84010
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.5
CVE-2026-116936
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 7.2
CVE-2026-116944
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.2
CVE-2026-118116
Microsoft SQL Server Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-88089
Microsoft SQL Server Remote Code Execution Vulnerability
 Important 6.7
CVE-2026-116932
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-118103
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-118104
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-67382
Microsoft SQL Server Information Disclosure Vulnerability
 Important 6.5
CVE-2026-118102
Microsoft SQL Server Information Disclosure Vulnerability
 Important 5.9
CVE-2026-116939
Microsoft SQL Server Information Disclosure Vulnerability
 Important 5.7
CVE-2026-116940
Microsoft SQL Server Information Disclosure Vulnerability
 Important 4.9
CVE-2026-94520
Microsoft SQL Server Denial of Service Vulnerability
 Important 4.9
CVE-2026-116934
Microsoft SQL Server Elevation of Privilege Vulnerability
 Not rated —
CVE-2026-116935
Microsoft SQL Server Information Disclosure Vulnerability
 Not rated —
CVE-2026-116942
Microsoft SQL Server Remote Code Execution Vulnerability
 Not rated —
CVE-2026-68781
Microsoft SQL Server Information Disclosure Vulnerability
 Not rated —