Microsoft · Security update · September 8, 2026

KB5122775: September 2026 security update

KB5122775, released September 8, 2026, fixes 45 CVEs in Microsoft SQL Server 2017 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
45
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0117
67th percentile

Priority of the 45 CVEs

Patch now 0 Urgent 1 High 25 Routine 19

Applies to

Product
Microsoft SQL Server 2017 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-67631 SQL ServerRemote Code Execution9.8 0.0097 Exploitation Less Likely
High CVE-2026-67376 SQL ServerDenial of Service7.5 0.0117 Exploitation Unlikely
High CVE-2026-67368 SQL ServerElevation of Privilege8.8 0.0102 Exploitation Less Likely
High CVE-2026-66819 SQL ServerElevation of Privilege8.8 0.0099 Exploitation Less Likely
High CVE-2026-66820 SQL ServerElevation of Privilege8.8 0.0099 Exploitation Less Likely
High CVE-2026-67370 SQL ServerElevation of Privilege8.8 0.0099 Exploitation Less Likely
High CVE-2026-67380 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-67381 SQL ServerElevation of Privilege8.8 0.0091 Exploitation Less Likely
High CVE-2026-67384 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-67385 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-67388 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-67639 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-68775 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-68786 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-77481 SQL ServerRemote Code Execution8.8 0.0091 Exploitation Unlikely
High CVE-2026-77482 SQL ServerRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-77486 SQL ServerRemote Code Execution8.8 0.0082 Exploitation Unlikely
High CVE-2026-78442 Windows OLE DBRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-66814 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-66818 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-73028 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-77480 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-77483 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-77487 SQL ServerElevation of Privilege8.8 0.0078 Exploitation Less Likely
High CVE-2026-68787 SQL ServerRemote Code Execution7.8 0.0033 Exploitation Less Likely
Showing 1 to 25 of 45 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.