Supported
SQL Server 2025
Support ends on 6 Jan 2036 (in 111 months). The newest release is 17.0.5015.4, published 13 Oct 2026.
What to do
Stay on the newest release, 17.0.5015.4. Support continues until 6 Jan 2036.
17.0.5015.4Newest release · 1d ago
3371
Days of support left · until 6 Jan 2036
6Releases in the last 12 months · typically every 26 days
77CVEs fixed in collected releasesIs your version current?
Compared with the publisher's releases of this lineSQL Server support timeline
From first preview through release to end of support, as the vendors publish them- SQL Server 2017 ends on 12 Oct 2027 (in 12 months).
- The newest supported line is SQL Server 2025, supported until 6 Jan 2036.
SQL Server 202517.0.5015.4 · until 6 Jan 2036 (in 111 months)
SQL Server 202216.0.4305.5 · until 11 Jan 2033 (in 75 months)
SQL Server 201915.0.4500.2 · until 8 Jan 2030 (in 39 months)
SQL Server 201714.0.3560.2 · until 12 Oct 2027 (in 12 months)
Ticks are releases; the red ones fix CVEs. Dates come from each vendor's release and lifecycle data and move when the vendor changes them.
Releases of SQL Server 2025
8 collected, newest first| Version | Published | Release | What the notes say |
|---|---|---|---|
| 17.0.5015.4 | 13 Oct 2026 | CU9 + GDRKB5126967 | — |
| 17.0.1145.4 | 13 Oct 2026 | GDRKB5128492 | — |
| 17.0.5005.3 | 15 Sep 2026 | CU9KB5122048 | — |
| 17.0.4085.5 | 8 Sep 2026 | CU8 + GDRKB5122769 | — |
| 17.0.1135.8 | 8 Sep 2026 | GDRKB5122770 | — |
| 17.0.4075.5 | 13 Aug 2026 | CU8KB5104822 | — |
| 17.0.4065.4 | 16 Jul 2026 | CU7KB5096981 | — |
| 17.0.4060.2 | 14 Jul 2026 | CU6 + GDRKB5101346 | — |
Security fixes
CVEs the collected releases fix, newest first| CVE | Severity | Fixed in |
|---|---|---|
| CVE-2026-65674Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-94512SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-67625Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.5 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-68883Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.5 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-85886Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 8.5 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-96956SQL Server Elevation of Privilege Vulnerability | Important · CVSS 8.0 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-85888Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 7.7 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88081Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 7.7 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88083Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 7.5 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-85876Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 7.0 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-85919Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 7.0 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88082Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 7.0 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88088Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 7.0 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-70189Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 6.7 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88089Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 6.7 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-83945Microsoft SQL Server Remote Code Execution Vulnerability | Important · CVSS 6.6 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-67626Microsoft SQL Server Denial of Service Vulnerability | Important · CVSS 6.5 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88085Microsoft SQL Server Elevation of Privilege Vulnerability | Important · CVSS 6.4 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-88086Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 5.3 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-67628Microsoft SQL Server Information Disclosure Vulnerability | Important · CVSS 4.9 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-94520Microsoft SQL Server Denial of Service Vulnerability | Important · CVSS 4.9 | 17.0.1145.4 · 13 Oct 2026 |
| CVE-2026-67631Microsoft SQL Server Remote Code Execution Vulnerability | Critical · CVSS 9.8 | 17.0.1135.8 · 8 Sep 2026 |
| CVE-2026-67643Microsoft SQL Server Remote Code Execution Vulnerability | Critical · CVSS 9.8 | 17.0.1135.8 · 8 Sep 2026 |
| CVE-2026-67378Microsoft SQL Server Remote Code Execution Vulnerability | Critical · CVSS 9.0 | 17.0.1135.8 · 8 Sep 2026 |
| CVE-2026-67636Microsoft SQL Server Remote Code Execution Vulnerability | Critical · CVSS 9.0 | 17.0.1135.8 · 8 Sep 2026 |
52 more CVEs are named in older releases' notes.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.
Keep track
- Add the end of support to your calendar: one event on 6 Jan 2036, with a reminder 30 days before.
- SQL Server RSS feed: new releases, known issues, retirements and roadmap changes.
- What I run: list the versions you run and see which fall behind or out of support.
- Everything about SQL Server: its timeline, notices, roadmap and other lines.