Skip to the content
The Update Bureau

Monthly Patch Briefing

September 2026

66 updates released this month .

Updates, page 3

Updates, page 3:
  • SQL Server · CU32 + GDR
    SQL Server 2019 CU32 + GDR SQL Server 2019 CU32 + GDR Security update
    KB5122772

    52 vulnerabilities addressed; linked-server queries can fail

    Addresses 52 vulnerabilities, including three Critical remote code execution flaws; none are listed as exploited. Some linked-server queries might fail with error 7416 after installation.

    Build 15.0.4490.9
    Security 52 CVEs 3 critical
    Known issues 1 open
    Replaced by KB5128494 →
  • SQL Server · GDR
    SQL Server 2019 GDR SQL Server 2019 GDR Security update
    KB5122773

    Three critical remote-code flaws affect the database engine

    Fixes 52 vulnerabilities, including three critical flaws that could allow remote code execution in SQL Server. It also lists an open issue that can make some linked server queries fail with error 7416.

    Build 15.0.2190.7
    Security 52 CVEs 3 critical
    Known issues 1 open
    Replaced by KB5128495 →
  • SQL Server · CU31 + GDR
    SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update
    KB5122774

    Critical remote-code-execution flaw patched; linked queries can fail

    Fixes 45 vulnerabilities, including one critical SQL Server remote-code-execution flaw. Linked server queries using MSDASQL and a provider string can fail with error 7416.

    Build 14.0.3550.4
    Security 45 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5128496 →
  • SQL Server · GDR
    SQL Server 2017 GDR SQL Server 2017 GDR Security update
    KB5122775

    Database Engine remote-code flaw patched; linked-server error remains

    The update fixes 45 vulnerabilities, including one Critical SQL Server remote-code execution flaw. Linked-server queries using MSDASQL and a provider string can still fail with error 7416.

    Build 14.0.2130.4
    Security 45 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5128497 →
  • SharePoint Server · SE
    SharePoint Server SE SharePoint Server SE Security update
    Updated
    KB5002908

    Workflow features change; server flaws patched

    Information disclosure, code execution and other flaws are patched, while several site features become disabled. Farms running SharePoint Workflow Manager need KB5002799 first.

    Build 16.0.20326.20136
    Security 19 CVEs
    Replaced by KB5002927 →
  • Office Online Server OOS Office Online Server Security update
    KB5002910

    Excel remote code execution and disclosure flaws addressed

    The update addresses 28 vulnerabilities in Office Online Server, including Excel remote code execution and information disclosure flaws. Office Online Server updates end on December 31, 2026.

    Build 16.0.10417.20207
    Security 28 CVEs
    Replaced by KB5002928 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 24H2, 25H2, 26H2 · Windows Server 2025 Security update
    KB5126052

    Two .NET vulnerabilities addressed; 64-bit crashes targeted

    The update addresses two Important .NET Framework vulnerabilities and an issue that could cause intermittent crashes in some 64-bit .NET Framework scenarios.

    Builds 4.8.9347.0 2.0.50727.9183
    Security 2 CVEs
    Replaced by KB5127690 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 26H1 Security update
    KB5126053

    Elevation-of-privilege and code-execution flaws addressed

    Addresses two Important .NET Framework vulnerabilities, including remote code execution, and intermittent crashes in some 64-bit scenarios.

    Build 4.8.9347.0
    Security 2 CVEs
    Replaced by KB5127691 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 23H2 Security update
    KB5126424

    Intermittent crashes in 64-bit .NET scenarios addressed

    The update addresses two .NET Framework security vulnerabilities and intermittent crashes in some 64-bit scenarios. A restart is required if affected files are in use.

    Builds 4.8.9346.0 2.0.50727.9183
    Security 2 CVEs
    Replaced by KB5127692 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 10 21H2, 22H2 Security update
    KB5126421

    Elevation-of-privilege and remote-code flaws addressed

    Addresses two Important .NET Framework vulnerabilities, including one that could let an attacker run code remotely. It also includes reliability improvements.

    Builds 4.8.9346.0 2.0.50727.9183
    Security 2 CVEs
    Replaced by KB5127689 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows Server 2022 Security update
    KB5126422

    Remote code execution and privilege-escalation flaws addressed

    The update addresses two .NET vulnerabilities, including a remote code execution flaw. Microsoft later removed CVE-2026-62886 from the KB page’s vulnerability listing.

    Builds 4.8.9346.0 2.0.50727.9183
    Security 2 CVEs
    Replaced by KB5127693 →
  • .NET Framework · 3.5, 4.8
    .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 21H2, 22H2 Security update
    KB5126046

    Privilege and remote-code-execution flaws addressed

    Two .NET Framework flaws could allow higher privileges or remote code execution. The update addresses both; restart if affected files are in use.

    Builds 4.8.4806.0 2.0.50727.9183
    Security 2 CVEs
    Replaced by KB5127683 →
  • .NET Framework · 3.5, 4.8
    .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows Server 2022 Security update
    KB5126050

    Privilege-escalation and code-execution flaws addressed

    The update addresses .NET Framework elevation-of-privilege and remote-code-execution vulnerabilities. Although the KB page still lists CVE-2026-62886, a later correction removed it from the vulnerability listing.

    Builds 4.8.4806.0 2.0.50727.9183
    Security 2 CVEs
    Replaced by KB5127687 →
  • .NET Framework · 3.5, 4.8
    .NET Framework 3.5 / 4.8 .NET Framework 3.5 / 4.8 for Windows 10 1809 · Windows Server 2019 Security update
    KB5126048

    Elevation-of-privilege and remote-code flaws addressed

    The update addresses two .NET Framework security vulnerabilities, including remote code execution and elevation of privilege. It applies to Windows 10 version 1809 and Windows Server 2019 systems with .NET Framework 3.5 or 4.8.

    Builds 4.8.4806.0 2.0.50727.9070
    Security 2 CVEs
    Replaced by KB5127685 →
  • .NET Framework · 4.8
    .NET Framework 4.8 .NET Framework 4.8 for Windows 10 1607 · Windows Server 2016 Security update
    KB5126047

    Two .NET vulnerabilities addressed

    Addresses two Important .NET Framework vulnerabilities, including one that could allow remote code execution. A restart might be required if affected files are in use.

    Build 4.8.4806.0
    Security 2 CVEs
    Replaced by KB5127684 →
  • .NET Framework · 3.5, 4.7.2
    .NET Framework 3.5 / 4.7.2 .NET Framework 3.5 / 4.7.2 for Windows 10 1809 · Windows Server 2019 Security update
    KB5126043

    Privilege and code-execution flaws addressed

    The update addresses two security flaws: one could let an attacker gain higher privileges, and another could let them run code.

    Builds 4.7.4145.0 2.0.50727.9070
    Security 2 CVEs
    Replaced by KB5127666 →