# KB5122771: September 2026 security update KB5122771, released September 8, 2026, fixes 52 CVEs in Microsoft SQL Server 2022 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/microsoft/kb5122771 - Platform: Microsoft - Released: Sep 8, 2026 - Priority: Urgent (Closes CVE-2026-67643, rated Critical) - CVEs: 52, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5122771 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft SQL Server 2022 for x64-based Systems (GDR)](https://patchblox.com/security/data/product/microsoft/microsoft-sql-server-2022-for-x64-based-systems-gdr.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-67631](https://patchblox.com/security/data/cve/CVE-2026-67631.md) | Urgent | SQL Server | 9.8 | 0.0097 | | | [CVE-2026-67643](https://patchblox.com/security/data/cve/CVE-2026-67643.md) | Urgent | SQL Server | 9.8 | 0.0097 | | | [CVE-2026-67378](https://patchblox.com/security/data/cve/CVE-2026-67378.md) | Urgent | SQL Server | 9.0 | 0.0071 | | | [CVE-2026-67636](https://patchblox.com/security/data/cve/CVE-2026-67636.md) | Urgent | SQL Server | 9.0 | 0.0071 | | | [CVE-2026-77484](https://patchblox.com/security/data/cve/CVE-2026-77484.md) | High | SQL Server | 8.8 | 0.0169 | | | [CVE-2026-67376](https://patchblox.com/security/data/cve/CVE-2026-67376.md) | High | SQL Server | 7.5 | 0.0117 | | | [CVE-2026-47297](https://patchblox.com/security/data/cve/CVE-2026-47297.md) | High | SQL Server | 8.1 | 0.0111 | | | [CVE-2026-67368](https://patchblox.com/security/data/cve/CVE-2026-67368.md) | High | SQL Server | 8.8 | 0.0102 | | | [CVE-2026-66819](https://patchblox.com/security/data/cve/CVE-2026-66819.md) | High | SQL Server | 8.8 | 0.0099 | | | [CVE-2026-66820](https://patchblox.com/security/data/cve/CVE-2026-66820.md) | High | SQL Server | 8.8 | 0.0099 | | | [CVE-2026-67370](https://patchblox.com/security/data/cve/CVE-2026-67370.md) | High | SQL Server | 8.8 | 0.0099 | | | [CVE-2026-67380](https://patchblox.com/security/data/cve/CVE-2026-67380.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-67381](https://patchblox.com/security/data/cve/CVE-2026-67381.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-67384](https://patchblox.com/security/data/cve/CVE-2026-67384.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-67385](https://patchblox.com/security/data/cve/CVE-2026-67385.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-67388](https://patchblox.com/security/data/cve/CVE-2026-67388.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-67639](https://patchblox.com/security/data/cve/CVE-2026-67639.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-68775](https://patchblox.com/security/data/cve/CVE-2026-68775.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-68786](https://patchblox.com/security/data/cve/CVE-2026-68786.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-77481](https://patchblox.com/security/data/cve/CVE-2026-77481.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-78456](https://patchblox.com/security/data/cve/CVE-2026-78456.md) | High | SQL Server | 8.8 | 0.0091 | | | [CVE-2026-66814](https://patchblox.com/security/data/cve/CVE-2026-66814.md) | High | SQL Server | 8.8 | 0.0078 | | | [CVE-2026-66818](https://patchblox.com/security/data/cve/CVE-2026-66818.md) | High | SQL Server | 8.8 | 0.0078 | | | [CVE-2026-73028](https://patchblox.com/security/data/cve/CVE-2026-73028.md) | High | SQL Server | 8.8 | 0.0078 | | | [CVE-2026-77480](https://patchblox.com/security/data/cve/CVE-2026-77480.md) | High | SQL Server | 8.8 | 0.0078 | | | [CVE-2026-77483](https://patchblox.com/security/data/cve/CVE-2026-77483.md) | High | SQL Server | 8.8 | 0.0078 | | | [CVE-2026-77487](https://patchblox.com/security/data/cve/CVE-2026-77487.md) | High | SQL Server | 8.8 | 0.0078 | | | [CVE-2026-67379](https://patchblox.com/security/data/cve/CVE-2026-67379.md) | High | SQL Server | 8.5 | 0.0066 | | | [CVE-2026-68787](https://patchblox.com/security/data/cve/CVE-2026-68787.md) | High | SQL Server | 7.8 | 0.0033 | | | [CVE-2026-77485](https://patchblox.com/security/data/cve/CVE-2026-77485.md) | High | SQL Server | 7.0 | 0.0026 | | | [CVE-2026-67633](https://patchblox.com/security/data/cve/CVE-2026-67633.md) | Routine | SQL Server | 6.5 | 0.0114 | | | [CVE-2026-67641](https://patchblox.com/security/data/cve/CVE-2026-67641.md) | Routine | SQL Server | 6.5 | 0.0114 | | | [CVE-2026-68785](https://patchblox.com/security/data/cve/CVE-2026-68785.md) | Routine | SQL Server | 4.9 | 0.0112 | | | [CVE-2026-66816](https://patchblox.com/security/data/cve/CVE-2026-66816.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67386](https://patchblox.com/security/data/cve/CVE-2026-67386.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67389](https://patchblox.com/security/data/cve/CVE-2026-67389.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67390](https://patchblox.com/security/data/cve/CVE-2026-67390.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67393](https://patchblox.com/security/data/cve/CVE-2026-67393.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67624](https://patchblox.com/security/data/cve/CVE-2026-67624.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67629](https://patchblox.com/security/data/cve/CVE-2026-67629.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67630](https://patchblox.com/security/data/cve/CVE-2026-67630.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67645](https://patchblox.com/security/data/cve/CVE-2026-67645.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-67648](https://patchblox.com/security/data/cve/CVE-2026-67648.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68776](https://patchblox.com/security/data/cve/CVE-2026-68776.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68777](https://patchblox.com/security/data/cve/CVE-2026-68777.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68778](https://patchblox.com/security/data/cve/CVE-2026-68778.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68779](https://patchblox.com/security/data/cve/CVE-2026-68779.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68780](https://patchblox.com/security/data/cve/CVE-2026-68780.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68781](https://patchblox.com/security/data/cve/CVE-2026-68781.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-68784](https://patchblox.com/security/data/cve/CVE-2026-68784.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-73029](https://patchblox.com/security/data/cve/CVE-2026-73029.md) | Routine | SQL Server | 6.5 | 0.0100 | | | [CVE-2026-77488](https://patchblox.com/security/data/cve/CVE-2026-77488.md) | Routine | SQL Server | 5.5 | 0.0040 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo