# KB5122775: September 2026 security update

KB5122775, released September 8, 2026, fixes 45 CVEs in Microsoft SQL Server 2017 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/microsoft/kb5122775
- Platform: Microsoft
- Released: Sep 8, 2026
- Priority: Urgent (Closes CVE-2026-67631, rated Critical)
- CVEs: 45, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://support.microsoft.com/help/5122775

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft SQL Server 2017 for x64-based Systems (GDR)](https://patchblox.com/security/data/product/microsoft/microsoft-sql-server-2017-for-x64-based-systems-gdr.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-67631](https://patchblox.com/security/data/cve/CVE-2026-67631.md) | Urgent | SQL Server | 9.8 | 0.0097 |  |
| [CVE-2026-67376](https://patchblox.com/security/data/cve/CVE-2026-67376.md) | High | SQL Server | 7.5 | 0.0117 |  |
| [CVE-2026-67368](https://patchblox.com/security/data/cve/CVE-2026-67368.md) | High | SQL Server | 8.8 | 0.0102 |  |
| [CVE-2026-66819](https://patchblox.com/security/data/cve/CVE-2026-66819.md) | High | SQL Server | 8.8 | 0.0099 |  |
| [CVE-2026-66820](https://patchblox.com/security/data/cve/CVE-2026-66820.md) | High | SQL Server | 8.8 | 0.0099 |  |
| [CVE-2026-67370](https://patchblox.com/security/data/cve/CVE-2026-67370.md) | High | SQL Server | 8.8 | 0.0099 |  |
| [CVE-2026-67380](https://patchblox.com/security/data/cve/CVE-2026-67380.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-67381](https://patchblox.com/security/data/cve/CVE-2026-67381.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-67384](https://patchblox.com/security/data/cve/CVE-2026-67384.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-67385](https://patchblox.com/security/data/cve/CVE-2026-67385.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-67388](https://patchblox.com/security/data/cve/CVE-2026-67388.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-67639](https://patchblox.com/security/data/cve/CVE-2026-67639.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-68775](https://patchblox.com/security/data/cve/CVE-2026-68775.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-68786](https://patchblox.com/security/data/cve/CVE-2026-68786.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-77481](https://patchblox.com/security/data/cve/CVE-2026-77481.md) | High | SQL Server | 8.8 | 0.0091 |  |
| [CVE-2026-77482](https://patchblox.com/security/data/cve/CVE-2026-77482.md) | High | SQL Server | 8.8 | 0.0082 |  |
| [CVE-2026-77486](https://patchblox.com/security/data/cve/CVE-2026-77486.md) | High | SQL Server | 8.8 | 0.0082 |  |
| [CVE-2026-78442](https://patchblox.com/security/data/cve/CVE-2026-78442.md) | High | Windows OLE DB | 8.8 | 0.0082 |  |
| [CVE-2026-66814](https://patchblox.com/security/data/cve/CVE-2026-66814.md) | High | SQL Server | 8.8 | 0.0078 |  |
| [CVE-2026-66818](https://patchblox.com/security/data/cve/CVE-2026-66818.md) | High | SQL Server | 8.8 | 0.0078 |  |
| [CVE-2026-73028](https://patchblox.com/security/data/cve/CVE-2026-73028.md) | High | SQL Server | 8.8 | 0.0078 |  |
| [CVE-2026-77480](https://patchblox.com/security/data/cve/CVE-2026-77480.md) | High | SQL Server | 8.8 | 0.0078 |  |
| [CVE-2026-77483](https://patchblox.com/security/data/cve/CVE-2026-77483.md) | High | SQL Server | 8.8 | 0.0078 |  |
| [CVE-2026-77487](https://patchblox.com/security/data/cve/CVE-2026-77487.md) | High | SQL Server | 8.8 | 0.0078 |  |
| [CVE-2026-68787](https://patchblox.com/security/data/cve/CVE-2026-68787.md) | High | SQL Server | 7.8 | 0.0033 |  |
| [CVE-2026-77485](https://patchblox.com/security/data/cve/CVE-2026-77485.md) | High | SQL Server | 7.0 | 0.0026 |  |
| [CVE-2026-67633](https://patchblox.com/security/data/cve/CVE-2026-67633.md) | Routine | SQL Server | 6.5 | 0.0114 |  |
| [CVE-2026-68785](https://patchblox.com/security/data/cve/CVE-2026-68785.md) | Routine | SQL Server | 4.9 | 0.0112 |  |
| [CVE-2026-67386](https://patchblox.com/security/data/cve/CVE-2026-67386.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-67390](https://patchblox.com/security/data/cve/CVE-2026-67390.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-67393](https://patchblox.com/security/data/cve/CVE-2026-67393.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-67629](https://patchblox.com/security/data/cve/CVE-2026-67629.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-67630](https://patchblox.com/security/data/cve/CVE-2026-67630.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-67645](https://patchblox.com/security/data/cve/CVE-2026-67645.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-67648](https://patchblox.com/security/data/cve/CVE-2026-67648.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68776](https://patchblox.com/security/data/cve/CVE-2026-68776.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68777](https://patchblox.com/security/data/cve/CVE-2026-68777.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68778](https://patchblox.com/security/data/cve/CVE-2026-68778.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68779](https://patchblox.com/security/data/cve/CVE-2026-68779.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68780](https://patchblox.com/security/data/cve/CVE-2026-68780.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68781](https://patchblox.com/security/data/cve/CVE-2026-68781.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-68784](https://patchblox.com/security/data/cve/CVE-2026-68784.md) | Routine | SQL Server | 6.5 | 0.0100 |  |
| [CVE-2026-69562](https://patchblox.com/security/data/cve/CVE-2026-69562.md) | Routine | SQL Server | 6.5 | 0.0092 |  |
| [CVE-2026-78441](https://patchblox.com/security/data/cve/CVE-2026-78441.md) | Routine | Windows OLE DB | 6.5 | 0.0092 |  |
| [CVE-2026-77488](https://patchblox.com/security/data/cve/CVE-2026-77488.md) | Routine | SQL Server | 5.5 | 0.0040 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
