Skip to the content
The Update Bureau

SQL Server 2017

SQL Server 2017

Every published release for SQL Server 2017, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5132746 Nov 10, 2026
Build
14.0.3570.2
Released
Sep 29, 2017
Cumulative updates
no longer updated since Oct 11, 2022
Security updates
updates until Oct 12, 2027
Known issues
2 open

Build history

  • SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update

    KB5046061

    Replication CDC issues fixed alongside an elevation-of-privilege flaw

    Resolves an important SQL Server elevation-of-privilege vulnerability and fixes functional issues in Change Data Capture that the September GDR introduced.

    Check the newer update, KB5046858

    Key changes 1 CVE · 2 changes

    • Improved Microsoft Update Catalog: The update detection logic changes for this and future security releases in the Microsoft Update Catalog.
    • Fix Replication: Change Data Capture functional issues introduced by the September GDR are fixed.
    • CVSS 8.8 CVE-2024-37341: Microsoft SQL Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14.0.3480.1
    Security
    1 vulnerability fixed
    Restart
    Required
  • SQL Server 2017 GDR SQL Server 2017 GDR Security update

    KB5046058

    Elevation-of-privilege flaw resolved; Change Data Capture fixed

    Resolves an Important SQL Server elevation-of-privilege vulnerability and fixes Change Data Capture functional issues introduced in the September GDR.

    Check the newer update, KB5046857

    Key changes 1 CVE · 1 change

    • Fix Replication: Change Data Capture no longer has the functional issues introduced in the September GDR.
    • CVSS 8.8 CVE-2024-37341: Microsoft SQL Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14.0.2065.1
    Security
    1 vulnerability fixed
    Restart
    Required
  • SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update

    KB5042215

    CDC metadata safeguards added; temporal-table quoting fixed

    Fixes 13 vulnerabilities and includes a known CDC issue: columns with commas might disappear from CDC tracking tables and cause capture jobs to fail.

    Check the newer update, KB5046061
    Known issues: 1 open Organizations and IT administrators
    • CDC capture job might fail if columns are missing in CDC change tables

    Key changes 13 CVEs · 3 changes

    • Improved Query Execution: A check of the model used by PREDICT helps avoid errors caused by an incorrect model.
    • Improved Replication: CDC gets a safeguard that can block data definition changes to its metadata.
    • Fix Temporal: Stored procedures that manage temporal tables correctly quote table and column names when building internal SQL batches.

    Read update Source: Microsoft

    Build
    14.0.3475.1
    Security
    13 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2017 GDR SQL Server 2017 GDR Security update

    KB5042217

    Twelve security flaws addressed; CDC column loss remains possible

    Addresses 12 Important vulnerabilities in SQL Server 2017. It also introduces a known CDC issue that can leave columns missing and cause capture jobs or applications to fail; a KEEP_CDC restore can report an error near the end even when the database restores successfully.

    Check the newer update, KB5046058
    Known issues: 1 open Organizations and IT administrators
    • CDC capture job might fail if columns are missing in CDC change tables

    Key changes 12 CVEs · 3 changes

    • Improved Query Execution: Using PREDICT with an incorrect model now gets a validation check to help avoid errors.
    • Improved Replication: CDC can block data-definition operations through a new metadata protection capability.
    • Fix Temporal: Stored procedures that manage temporal tables correctly quote table and column names in cases where they previously might not.

    Read update Source: Microsoft

    Build
    14.0.2060.1
    Security
    12 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update

    KB5040940

    Native Client OLE DB flaws patched; unused Stretch DB components removed

    The update addresses 37 Important vulnerabilities in the Native Client OLE DB Provider and removes unused Stretch DB components from Setup.

    Check the newer update, KB5042215

    Key changes 37 CVEs · 1 change

    • Removed Stretch DB: Unused Stretch DB components are removed from SQL Server Setup.
    • CVSS 8.8 CVE-2024-20701: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2024-21303: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14.0.3471.2
    Security
    37 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2017 GDR SQL Server 2017 GDR Security update

    KB5040942

    Native Client OLE DB flaws addressed; unused Stretch DB parts removed

    Resolves 37 vulnerabilities: 36 rated Important and one unrated, with none rated Critical. It also removes unused Stretch DB components from SQL Server Setup.

    Check the newer update, KB5042217

    Key changes 37 CVEs · 1 change

    • Removed Stretch DB: Unused Stretch DB components are removed from SQL Server Setup.
    • CVSS 8.8 CVE-2024-20701: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2024-21303: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14.0.2056.2
    Security
    37 vulnerabilities fixed
    Restart
    Required