Microsoft · Security update · September 8, 2026

KB5122771: September 2026 security update

KB5122771, released September 8, 2026, fixes 52 CVEs in Microsoft SQL Server 2022 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
52
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0169
77th percentile

Priority of the 52 CVEs

Patch now 0 Urgent 4 High 26 Routine 22

Applies to

Product
Microsoft SQL Server 2022 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-67631 SQL ServerRemote Code Execution9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-67643 SQL ServerRemote Code Execution9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-67378 SQL ServerRemote Code Execution9.0 0.0071 Exploitation Less Likely
Urgent CVE-2026-67636 SQL ServerRemote Code Execution9.0 0.0071 Exploitation Unlikely
High CVE-2026-77484 SQL ServerRemote Code Execution8.8 0.0169 Exploitation Less Likely
High CVE-2026-67376 SQL ServerDenial of Service7.5 0.0117 Exploitation Unlikely
High CVE-2026-47297 SQL ServerRemote Code Execution8.1 0.0111 Exploitation Less Likely
High CVE-2026-67368 SQL ServerElevation of Privilege8.8 0.0102 Exploitation Less Likely
High CVE-2026-66819 SQL ServerElevation of Privilege8.8 0.0099 Exploitation Less Likely
High CVE-2026-66820 SQL ServerElevation of Privilege8.8 0.0099 Exploitation Less Likely
High CVE-2026-67370 SQL ServerElevation of Privilege8.8 0.0099 Exploitation Less Likely
High CVE-2026-67380 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-67381 SQL ServerElevation of Privilege8.8 0.0091 Exploitation Less Likely
High CVE-2026-67384 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-67385 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-67388 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-67639 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-68775 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-68786 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-77481 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-78456 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-66814 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-66818 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-73028 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-77480 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
Showing 1 to 25 of 52 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.