Microsoft · Security update · November 10, 2026

KB5129299: November 2026 security update

KB5129299, released November 10, 2026, fixes 51 CVEs in Microsoft SQL Server 2025 for x64-based Systems CU10. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
51
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
n/a

Priority of the 51 CVEs

Patch now 0 Urgent 0 High 42 Routine 9

Applies to

Product
Microsoft SQL Server 2025 for x64-based Systems CU10

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2026-116945 SQL ServerRemote Code Execution9.8 n/a Exploitation Less Likely
High CVE-2026-116930 SQL ServerRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-116934 SQL ServerElevation of Privilege8.8 n/a Exploitation Less Likely
High CVE-2026-116941 SQL ServerRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-116942 SQL ServerRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-116946 SQL ServerRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118105 SQL ServerElevation of Privilege8.8 n/a Exploitation Less Likely
High CVE-2026-118109 SQL ServerElevation of Privilege8.8 n/a Exploitation Less Likely
High CVE-2026-118110 SQL ServerElevation of Privilege8.8 n/a Exploitation Less Likely
High CVE-2026-118120 SQL ServerElevation of Privilege8.8 n/a Exploitation Less Likely
High CVE-2026-67372 SQL ServerRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-67374 SQL ServerRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-67387 SQL ServerElevation of Privilege8.8 n/a Exploitation Less Likely
High CVE-2026-67391 SQL ServerRemote Code Execution8.8 n/a Exploitation Unlikely
High CVE-2026-67632 SQL ServerRemote Code Execution8.8 n/a Exploitation Unlikely
High CVE-2026-67637 SQL ServerRemote Code Execution8.8 n/a Exploitation Unlikely
High CVE-2026-67646 SQL ServerRemote Code Execution8.8 n/a Exploitation Unlikely
High CVE-2026-94511 SQL ServerRemote Code Execution8.8 n/a Exploitation Unlikely
High CVE-2026-118106 SQL ServerRemote Code Execution8.1 n/a Exploitation Less Likely
High CVE-2026-66813 SQL ServerElevation of Privilege8.1 n/a Exploitation Less Likely
High CVE-2026-118111 SQL ServerElevation of Privilege8.0 n/a Exploitation Less Likely
High CVE-2026-118112 SQL ServerElevation of Privilege8.0 n/a Exploitation Less Likely
High CVE-2026-118113 SQL ServerElevation of Privilege8.0 n/a Exploitation Less Likely
High CVE-2026-118117 SQL ServerElevation of Privilege8.0 n/a Exploitation Less Likely
High CVE-2026-118118 SQL ServerElevation of Privilege8.0 n/a Exploitation Less Likely
Showing 1 to 25 of 51 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.