Skip to the content
The Update Bureau

SQL Server 2022

SQL Server 2022

Every published release for SQL Server 2022, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5125472 Nov 12, 2026
Build
16.0.4325.4
Released
Nov 16, 2022
Cumulative updates
updates until Jan 11, 2028
Security updates
updates until Jan 11, 2033
Known issues
7 open

Build history

  • SQL Server 2022 CU21 SQL Server 2022 CU21 Cumulative update

    KB5065865

    SQL injection protections added; parallel SESSION_CONTEXT issue remains

    Includes SQL injection and privilege-escalation protections, along with fixes for SQL Server Engine problems. Queries using SESSION_CONTEXT in parallel plans might still return incorrect results or trigger access violation dumps.

    Check the newer update, KB5068406
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 17 changes

    • Fix DB Management: Truncating a table with nonaligned partitions no longer succeeds unexpectedly and causes corruption.
    • Fix High Availability and Disaster Recovery: The primary replica of an availability group no longer encounters this assertion dump issue.
    • Fix High Availability and Disaster Recovery: A SQL injection vulnerability in a system stored procedure is fixed.

    Read update Source: Microsoft

    Build
    16.0.4215.2
    Restart
    Required
  • SQL Server 2022 CU20 + GDR SQL Server 2022 CU20 + GDR Security update

    KB5065220

    DMV data exposure and temporal-table SQL execution flaws fixed

    Fixes two Important SQL Server vulnerabilities: one could expose sensitive statement text, and the other could let attackers with elevated privileges run SQL code.

    Check the newer update, KB5068406

    Key changes 2 CVEs · 2 changes

    • Fix Programmability: Statement text inspected from other sessions might contain sensitive data.
    • Fix Temporal: Improper input validation during temporal history table cleanup could let attackers with elevated privileges run SQL code.
    • CVSS 8.8 CVE-2025-55227: Microsoft SQL Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    16.0.4212.1
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5065221

    Sensitive statement text exposure and SQL code execution fixed

    Fixes two Important SQL Server vulnerabilities, including issues that could expose statement text or let attackers with elevated privileges run SQL code.

    Check the newer update, KB5068407

    Key changes 2 CVEs · 2 changes

    • Fix Programmability: Sensitive text from statements running in other sessions is no longer exposed when database monitoring views are used to inspect them.
    • Fix Temporal: Attackers with elevated privileges can no longer exploit a flaw in historical-record cleanup to run SQL code.
    • CVSS 8.8 CVE-2025-55227: Microsoft SQL Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    16.0.1150.1
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 CU20 + GDR SQL Server 2022 CU20 + GDR Security update

    KB5063814

    SQL injection flaws and login-permission escalation blocked

    The update addresses five Important SQL Server vulnerabilities, all involving elevation of privilege. It also changes protections for SQL injection, login password resets, and SQL Agent job steps.

    Check the newer update, KB5065220

    Key changes 5 CVEs · 6 changes

    • Fix High Availability and Disaster Recovery: SQL injection through a system stored procedure is blocked.
    • Fix Metadata: SQL injection through a system stored procedure is blocked.
    • Fix Security Infrastructure: Users with access to certain stored procedures can no longer use them to run arbitrary code with elevated privileges.

    Read update Source: Microsoft

    Build
    16.0.4210.1
    Security
    5 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5063756

    Stored procedure and SQL Agent privilege flaws fixed

    The update fixes five Important-severity SQL Server vulnerabilities, including flaws involving SQL injection and elevation of privilege.

    Check the newer update, KB5065221

    Key changes 5 CVEs · 6 changes

    • Fix High Availability and Disaster Recovery: A SQL injection vulnerability in a system stored procedure is fixed.
    • Fix Metadata: A SQL injection vulnerability in a system stored procedure is fixed.
    • Fix Security Infrastructure: A vulnerability in certain stored procedures that could let users run arbitrary code with elevated privileges is fixed.

    Read update Source: Microsoft

    Build
    16.0.1145.1
    Security
    5 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 CU20 SQL Server 2022 CU20 Cumulative update

    KB5059390

    Analysis Services startup hangs and query errors fixed

    Includes 11 fixes for SQL Server 2022, including an Analysis Services startup hang and several query errors. A known issue with SESSION_CONTEXT in parallel query plans remains open.

    Check the newer update, KB5063814
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 11 changes

    • Improved Linux: SQL Server on Linux can now use memory limits set through Control Groups (cgroups) version 2.
    • Improved SQL Server Engine: SQL Server 2022 adds support for a CREATE USER syntax option that uses a SID and type, enabled by trace flag 11953.
    • Fix Analysis Services: Analysis Services is less likely to stop responding during startup in a rare case involving proactive caching notifications in multidim...

    Read update Source: Microsoft

    Build
    16.0.4205.1
    Restart
    Required
  • SQL Server 2022 CU19 + GDR SQL Server 2022 CU19 + GDR Security update

    KB5058721

    Memory exposure and query outages fixed; Setup restart blocker removed

    A SQL Setup defect that caused restarts and prevented Setup from continuing is fixed. The update also fixes three SQL Server Engine issues and addresses three Important vulnerabilities, including a publicly disclosed information-disclosure flaw.

    Check the newer update, KB5063814

    Key changes 3 CVEs · 4 changes

    • Fix Programmability: Under specific conditions, an attacker can no longer use a query to make the server unavailable.
    • Fix Programmability: In rare cases, using limited-length parameters with REPLACE no longer returns uninitialized memory.
    • Fix Query Execution: In rare cases, variable-length parameters no longer allow uninitialized memory to be read.

    Read update Source: Microsoft

    Build
    16.0.4200.1
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5058712

    SQL query flaws and Setup restarts fixed

    Fixes a query issue that could make SQL Server unavailable under specific conditions, along with rare memory-handling and Setup problems.

    Check the newer update, KB5063756

    Key changes 3 CVEs · 4 changes

    • Fix Programmability: A query that could make the server unavailable under specific conditions no longer causes that problem.
    • Fix Programmability: In rare cases, limited-length parameters used with REPLACE no longer cause uninitialized memory to be returned.
    • Fix Query Execution: In rare cases, variable-length parameters no longer allow uninitialized memory to be read.

    Read update Source: Microsoft

    Build
    16.0.1140.6
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 CU19 SQL Server 2022 CU19 Cumulative update

    KB5054531

    Repairs S3 backups, Entra sign-in, and SQL query problems

    CU19 adds 13 fixes after CU18, including repairs for S3-compatible backups, Microsoft Entra authentication on Linux, and incorrect query results. Queries using SESSION_CONTEXT in parallel plans can still return incorrect results or trigger access violations.

    Check the newer update, KB5058721
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 13 changes

    • Improved Query Optimizer: The EXPAND VIEWS behavior can be used without adding a per-query hint.
    • Improved Security Infrastructure: Auditing can now track actions associated with this action group.
    • Improved SQL OS: The log tail file name matches the dump file name after a stack dump is generated.

    Read update Source: Microsoft

    Build
    16.0.4195.2
    Restart
    Required
  • SQL Server 2022 CU18 SQL Server 2022 CU18 Cumulative update

    KB5050771

    Contained availability groups gain instance-level workload groups

    CU18 adds 11 fixes for SQL Server 2022 and lets contained availability groups use instance-level Resource Governor workload groups. Queries using SESSION_CONTEXT might still return incorrect results or trigger access violation dumps in parallel plans.

    Check the newer update, KB5054531
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 11 changes

    • Improved High Availability and Disaster Recovery: Contained availability groups can use Resource Governor workload groups defined at the SQL Server instance level.
    • Fix Backup Restore: A copy-only filegroup backup on an availability group secondary replica no longer fails with an unsupported-backup error.
    • Fix Linux: Some transactions no longer encounter extended waits during flush operations when the alternate write-through setting is enabled.

    Read update Source: Microsoft

    Build
    16.0.4185.3
    Restart
    Required
  • SQL Server 2022 CU17 SQL Server 2022 CU17 Cumulative update

    KB5048038

    Parallel SESSION_CONTEXT queries may return incorrect results

    Parallel queries that use SESSION_CONTEXT might return incorrect results or trigger access-violation dumps. CU17 also adds Always On support for Pacemaker clusters when SQL Server runs as a restricted application with SELinux enabled.

    Check the newer update, KB5050771
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 11 changes

    • New High Availability and Disaster Recovery: A new trace flag can increase the maximum number of parallel redo threads based on the total number of CPUs.
    • New High Availability and Disaster Recovery: Always On availability groups can use a Pacemaker cluster in the specified Linux configuration.
    • New In-Memory OLTP: A new server option lets SQL Server use the Hekaton DLL Generator for the In-Memory OLTP feature.

    Read update Source: Microsoft

    Build
    16.0.4175.1
    Restart
    Required
  • SQL Server 2022 CU16 SQL Server 2022 CU16 Cumulative update

    KB5048033

    Linux database corruption and snapshot backup failures fixed

    Includes 16 fixes for SQL Server 2022, including a Linux database corruption issue and snapshot backup failures. Queries using SESSION_CONTEXT in parallel plans might still return incorrect results or cause access violation dumps.

    Check the newer update, KB5048038
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 16 changes

    • Improved Replication: You can disable OLE DB streaming for the Replication Distribution Agent to avoid the referenced error.
    • Fix Analysis Services: DAX queries using SUMMARIZECOLUMNS and ROLLUPGROUP with multidimensional models return accurate totals when different sub-selects run w...
    • Fix Data Quality Services: Exporting cleaned data to SQL Server no longer produces an invalid Data Quality Services format.

    Read update Source: Microsoft

    Build
    16.0.4165.4
    Restart
    Required
  • SQL Server 2022 CU15 + GDR SQL Server 2022 CU15 + GDR Security update

    KB5046862

    SQL OS fixes address two remote code execution paths

    The update fixes two Important remote code execution vulnerabilities in SQL Server 2022, including one involving DLL planting and one involving a SQL Server assembly.

    Check the newer update, KB5058721

    Key changes 2 CVEs · 2 changes

    • Fix SQL OS: Remote code execution might be performed on a SQL Server instance through DLL planting.
    • Fix SQL OS: A vulnerability in a SQL Server assembly might allow remote code execution.
    • CVSS 7.8 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.4155.4
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5046861

    SQL OS fixes two remote code execution vulnerabilities

    Fixes two issues that might allow remote code execution.

    Check the newer update, KB5058712

    Key changes 2 CVEs · 2 changes

    • Fix SQL OS: Remote code execution on a SQL Server instance through DLL planting is fixed.
    • Fix SQL OS: An issue in which a SQL Server assembly vulnerability might allow remote code execution is fixed.
    • CVSS 7.8 CVE-2024-49021: Microsoft SQL Server Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.1135.2
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 CU15 + GDR SQL Server 2022 CU15 + GDR Security update

    KB5046059

    Elevation-of-privilege flaw addressed; CDC issues fixed

    Addresses an SQL Server elevation-of-privilege vulnerability and fixes known Change Data Capture issues introduced by the September GDR.

    Check the newer update, KB5046862

    Key changes 1 CVE · 1 change

    • Fix Replication: Known functional issues in Change Data Capture introduced by the September GDR are fixed.
    • CVSS 8.8 CVE-2024-37341: Microsoft SQL Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    16.0.4150.1
    Security
    1 vulnerability fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5046057

    Change Data Capture issues fixed; elevation flaw addressed

    Addresses an elevation-of-privilege vulnerability in SQL Server and fixes known Change Data Capture issues introduced in the September GDR.

    Check the newer update, KB5046861

    Key changes 1 CVE · 1 change

    • Fix Replication: Fixes known functional issues in Change Data Capture that were introduced in the September GDR.
    • CVSS 8.8 CVE-2024-37341: Microsoft SQL Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    16.0.1130.5
    Security
    1 vulnerability fixed
    Restart
    Required
  • SQL Server 2022 CU15 SQL Server 2022 CU15 Cumulative update

    KB5041321

    VSS backups and replication errors fixed; SESSION_CONTEXT issue remains

    Includes 14 fixes for SQL Server 2022, including problems with VSS backups and replication. Queries using SESSION_CONTEXT can still return incorrect results or cause access violation dumps in parallel plans.

    Check the newer update, KB5046059
    Known issues: 1 open Organizations and IT administrators
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 14 changes

    • New Replication: A new CDC metadata security feature helps prevent errors when upgrading a database that has CDC disabled.
    • Improved Master Data Services: Master Data Services uses updated checks to identify the current machine type and whether it is a domain controller.
    • Improved Query Execution: PREDICT checks that its MODEL parameter is valid, helping avoid errors caused by an incorrect model.

    Read update Source: Microsoft

    Build
    16.0.4145.4
    Restart
    Required
  • SQL Server 2022 CU14 + GDR SQL Server 2022 CU14 + GDR Security update

    KB5042578

    CDC capture jobs can fail; temporal-table quoting fixed

    Addresses 12 vulnerabilities and fixes temporal-table name quoting. In databases with CDC enabled, some column names might be missing from tracking tables, which can cause capture jobs to fail.

    Check the newer update, KB5046059
    Known issues: 1 open Organizations and IT administrators
    • CDC capture job might fail if columns are missing in CDC change tables

    Key changes 12 CVEs · 3 changes

    • Improved Query Execution: Running PREDICT with an incorrect model gets validation to help avoid errors.
    • Improved Replication: CDC gains a capability to lock down metadata definitions and block DDL operations.
    • Fix Temporal: Stored procedures that manage temporal tables quote table and column names correctly when building internal SQL batches.

    Read update Source: Microsoft

    Build
    16.0.4140.3
    Security
    12 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5042211

    CDC upgrades risk missing columns; 12 vulnerabilities addressed

    Addresses 12 vulnerabilities. Applying it can also expose a CDC issue that causes missing tracking-table columns and failed capture jobs, upgrades, or restores.

    Check the newer update, KB5046057
    Known issues: 1 open
    • CDC capture job might fail if columns are missing in CDC change tables

    Key changes 12 CVEs · 3 changes

    • Improved Query Execution: PREDICT checks the MODEL parameter to help avoid errors caused by an incorrect model.
    • Improved Replication: CDC can block changes to database definitions, improving security for the feature.
    • Fix Temporal: Stored procedures that manage temporal tables correctly quote table and column names read from database metadata.

    Read update Source: Microsoft

    Build
    16.0.1125.1
    Security
    12 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 CU14 SQL Server 2022 CU14 Cumulative update

    KB5038325

    SQL backups can fail; parallel queries may return wrong results

    Includes 12 fixes for SQL Server 2022, but it also lists backup and parallel-query problems. The backup issue is fixed in CU15; the parallel-query issue remains open.

    Check the newer update, KB5042578
    Known issues: 2 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans
    • Issue two: SQL Server VSS Writer might fail to perform a backup because no database is available to freeze

    Key changes 12 changes

    • New High Availability and Disaster Recovery: The cluster log report includes performance-monitor counters when a health-check timeout is reported.
    • Improved Command Line Tools: Linux container images use the newer Microsoft command-line tools directory; the former directory is being phased out.
    • Improved Query Optimizer: SQL Server estimates results more accurately for certain filters when its data statistics contain only one histogram step.

    Read update Source: Microsoft

    Build
    16.0.4135.4
    Restart
    Required
  • SQL Server 2022 CU13 + GDR SQL Server 2022 CU13 + GDR Security update

    KB5040939

    Unused Stretch DB components removed from Setup

    The update resolves 38 Important-severity vulnerabilities and removes unused Stretch DB components from Setup. It can request a restart.

    Check the newer update, KB5042578

    Key changes 38 CVEs · 1 change

    • Removed Stretch DB: Unused Stretch DB components are removed from SQL Server Setup.
    • CVSS 8.8 CVE-2024-20701: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2024-21303: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.4131.2
    Security
    38 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5040936

    38 OLE DB vulnerabilities addressed; unused Stretch DB components removed

    Resolves 38 vulnerabilities, all rated Important, including remote-code-execution flaws in OLE DB components. It also removes unused Stretch DB components from setup.

    Check the newer update, KB5042211

    Key changes 38 CVEs · 1 change

    • Removed Stretch DB: Unused Stretch DB components are removed from SQL Server Setup.
    • CVSS 8.8 CVE-2024-20701: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2024-21303: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.1121.4
    Security
    38 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 CU13 SQL Server 2022 CU13 Cumulative update

    KB5036432

    Availability-group patch failure can recover; SESSION_CONTEXT issue remains

    CU13 includes 15 fixes, including fixes for availability groups and replication. Setup might initially fail on some availability-group databases, while parallel SESSION_CONTEXT queries can still return incorrect results or cause access violations.

    Check the newer update, KB5040939
    Known issues: 1 open
    • Incorrect behavior of SESSION_CONTEXT in parallel plans

    Key changes 15 changes

    • New Query Execution: A new advanced option lets you limit memory used to handle remote procedure call parameters.
    • Improved Query Optimizer: Creating statistics on temporary tables can involve fewer registry waits.
    • Improved Replication: The change-tracking history records an error message to help explain cleanup failures.

    Read update Source: Microsoft

    Build
    16.0.4125.3
    Restart
    Required
  • SQL Server 2022 CU12 + GDR SQL Server 2022 CU12 + GDR Security update

    KB5036343

    Remote-code-execution flaws in SQL drivers addressed

    Addresses 38 Important vulnerabilities in the Microsoft ODBC and OLE DB drivers for SQL Server. SQL Server components move to build 16.0.4120.1.

    Check the newer update, KB5040939

    Key changes 38 CVEs · 1 change

    • Improved SQL Server: SQL Server components are updated to build 16.0.4120.1.
    • CVSS 8.8 CVE-2024-28906: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2024-28908: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.4120.1
    Security
    38 vulnerabilities fixed
    Restart
    Required
  • SQL Server 2022 GDR SQL Server 2022 GDR Security update

    KB5035432

    ODBC and OLE DB driver code-execution flaws closed

    Addresses remote code execution vulnerabilities in SQL Server's ODBC and OLE DB drivers.

    Check the newer update, KB5040936

    Key changes 38 CVEs · 1 change

    • Fix ODBC Driver and OLE DB Driver for SQL Server: The update resolves remote code execution vulnerabilities in the SQL Server ODBC and OLE DB drivers.
    • CVSS 8.8 CVE-2024-28906: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2024-28908: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.1115.1
    Security
    38 vulnerabilities fixed
    Restart
    Required