Microsoft · Security update · September 8, 2026

KB5122770: September 2026 security update

KB5122770, released September 8, 2026, fixes 56 CVEs in Microsoft SQL Server 2025 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
56
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0169
77th percentile

Priority of the 56 CVEs

Patch now 0 Urgent 4 High 28 Routine 24

Applies to

Product
Microsoft SQL Server 2025 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-67631 SQL Server Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-67643 SQL Server Remote Code Execution 9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-67378 SQL Server Remote Code Execution 9.0 0.0071 Exploitation Less Likely
Urgent CVE-2026-67636 SQL Server Remote Code Execution 9.0 0.0071 Exploitation Unlikely
High CVE-2026-77484 SQL Server Remote Code Execution 8.8 0.0169 Exploitation Less Likely
High CVE-2026-67376 SQL Server Denial of Service 7.5 0.0117 Exploitation Unlikely
High CVE-2026-47297 SQL Server Remote Code Execution 8.1 0.0111 Exploitation Less Likely
High CVE-2026-67368 SQL Server Elevation of Privilege 8.8 0.0102 Exploitation Less Likely
High CVE-2026-66819 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-66820 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-67370 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-67373 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67380 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67381 SQL Server Elevation of Privilege 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67384 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67385 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67388 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67638 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67639 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67642 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-68775 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-68786 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-77481 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-66814 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-66818 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
Showing 1 to 25 of 56 1Next