Microsoft · Security update · September 8, 2026

KB5122774: September 2026 security update

KB5122774, released September 8, 2026, fixes 45 CVEs in Microsoft SQL Server 2017 for x64-based Systems (CU 31). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
45
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0117
67th percentile

Priority of the 45 CVEs

Patch now 0 Urgent 1 High 25 Routine 19

Applies to

Product
Microsoft SQL Server 2017 for x64-based Systems (CU 31)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-67631 SQL Server Remote Code Execution 9.8 0.0097 Exploitation Less Likely
High CVE-2026-67376 SQL Server Denial of Service 7.5 0.0117 Exploitation Unlikely
High CVE-2026-67368 SQL Server Elevation of Privilege 8.8 0.0102 Exploitation Less Likely
High CVE-2026-66819 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-66820 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-67370 SQL Server Elevation of Privilege 8.8 0.0099 Exploitation Less Likely
High CVE-2026-67380 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67381 SQL Server Elevation of Privilege 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67384 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67385 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-67388 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-67639 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-68775 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-68786 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
High CVE-2026-77481 SQL Server Remote Code Execution 8.8 0.0091 Exploitation Unlikely
High CVE-2026-77482 SQL Server Remote Code Execution 8.8 0.0082 Exploitation Less Likely
High CVE-2026-77486 SQL Server Remote Code Execution 8.8 0.0082 Exploitation Unlikely
High CVE-2026-78442 Windows OLE DB Remote Code Execution 8.8 0.0082 Exploitation Less Likely
High CVE-2026-66814 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-66818 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-73028 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-77480 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-77483 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-77487 SQL Server Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2026-68787 SQL Server Remote Code Execution 7.8 0.0033 Exploitation Less Likely
Showing 1 to 25 of 45 1Next