Microsoft · Security update · September 8, 2026

KB5122771: September 2026 security update

KB5122771, released September 8, 2026, fixes 52 CVEs in Microsoft SQL Server 2022 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
52
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0169
77th percentile

Priority of the 52 CVEs

Patch now 0 Urgent 4 High 26 Routine 22

Applies to

Product
Microsoft SQL Server 2022 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-67631 SQL Server Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-67643 SQL Server Remote Code Execution 9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-67378 SQL Server Remote Code Execution 9.0 0.0071 Exploitation Less Likely
Urgent CVE-2026-67636 SQL Server Remote Code Execution 9.0 0.0071 Exploitation Unlikely
High CVE-2026-77484 SQL Server Remote Code Execution 8.8 0.0169 Exploitation Less Likely
High CVE-2026-67376 SQL Server Denial of Service 7.5 0.0117 Exploitation Unlikely
High CVE-2026-47297 SQL Server Remote Code Execution 8.1 0.0111 Exploitation Less Likely
High CVE-2026-67368 SQL Server Elevation of Privilege 8.8 0.0102 Exploitation Less Likely
High CVE-2026-66819 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-66820 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-67370 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-67380 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67381 SQL Server Elevation of Privilege 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67384 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67385 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67388 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67639 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-68775 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-68786 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-77481 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-78456 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-66814 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-66818 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-73028 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-77480 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
Showing 1 to 25 of 52 1Next