SQL Server 2017
Support ends on 12 Oct 2027 (in 12 months). The newest release is 14.0.3560.2, published 13 Oct 2026.
What to do
Stay on the newest release, 14.0.3560.2. Support continues until 12 Oct 2027.
Move to SQL Server 2025Latest 17.0.5015.4 · supported until 6 Jan 203698 more months of support- Microsoft lifecycle: SQL Server 2017 · End of support 12 Oct 2027
Is your version current?
Compared with the publisher's releases of this lineSQL Server support timeline
From first preview through release to end of support, as the vendors publish them- SQL Server 2017 ends on 12 Oct 2027 (in 12 months).
- The newest supported line is SQL Server 2025, supported until 6 Jan 2036.
Ticks are releases; the red ones fix CVEs. Dates come from each vendor's release and lifecycle data and move when the vendor changes them.
Releases of SQL Server 2017
8 collected, newest first| Version | Published | Release | What the notes say |
|---|---|---|---|
| 14.0.3560.2 | 13 Oct 2026 | CU31 + GDRKB5128496 | — |
| 14.0.2140.2 | 13 Oct 2026 | GDRKB5128497 | — |
| 14.0.3550.4 | 8 Sep 2026 | CU31 + GDRKB5122774 | — |
| 14.0.2130.4 | 8 Sep 2026 | GDRKB5122775 | — |
| 14.0.3540.1 | 14 Jul 2026 | CU31 + GDRKB5102337 | — |
| 14.0.2120.1 | 14 Jul 2026 | GDRKB5102338 | — |
| 14.0.3530.2 | 12 May 2026 | CU31 + GDRKB5090354 | — |
| 14.0.2110.2 | 12 May 2026 | GDRKB5090347 | — |
Security fixes
CVEs the collected releases fix, newest first| CVE | Severity | Fixed in |
|---|---|---|
| CVE-2026-94512SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-67625Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.5 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-68883Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.5 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-85886Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.5 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-96956SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.0 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-85888Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 7.7 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-88081Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 7.7 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-70189Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 6.7 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-88089Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 6.7 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-88085Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 6.4 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-67628Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 4.9 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-94520Microsoft SQL Server Denial of Service Vulnerability | Important · CVSS 4.9 | 14.0.2140.2 · 13 Oct 2026 |
| CVE-2026-67631Microsoft SQL Server Remote Code Execution Vulnerability | Critical · CVSS 9.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-66814Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-66818Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-66819Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-66820SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67368Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67370Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67380Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67381Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67384Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67385Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67388Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
| CVE-2026-67639Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 14.0.2130.4 · 8 Sep 2026 |
32 more CVEs are named in older releases' notes.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.
Keep track
- Add the end of support to your calendar: one event on 12 Oct 2027, with a reminder 30 days before.
- SQL Server RSS feed: new releases, known issues, retirements and roadmap changes.
- What I run: list the versions you run and see which fall behind or out of support.
- Everything about SQL Server: its timeline, notices, roadmap and other lines.