59/59 sources · synced 00:50 UTC Customize Public mode
KB5122775

Security update fixing 45 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket
0Windows versions
45CVEs fixed · 1 critical
0Exploited or in CISA KEV
0Open known issues affecting it
YesRestart required (per MSRC)

Known issues in this update

Windows release health

No known issues listed

Windows release health lists no issues from this KB or the update it builds on.

Issues this update resolves

No resolved issues listed

Windows release health names no issues fixed by this KB.

Security fixes

45 Microsoft CVEs · most urgent first
CVE Vulnerability Severity CVSSEPSSImpact Status
CVE-2026-67631 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Critical 9.81.0%Remote Code Execution Revised 17 Sep
CVE-2026-66814 Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%Elevation of Privilege
CVE-2026-66818 Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%Elevation of Privilege
CVE-2026-66819 Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.81.0%Elevation of Privilege
CVE-2026-66820 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.81.0%Elevation of Privilege
CVE-2026-67368 Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.81.0%Elevation of Privilege
CVE-2026-67370 Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.81.0%Elevation of Privilege
CVE-2026-67380 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-67381 Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.9%Elevation of Privilege
CVE-2026-67384 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-67385 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-67388 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-67639 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-68775 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-68786 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-73028 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%Elevation of Privilege
CVE-2026-77480 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%Elevation of Privilege
CVE-2026-77481 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%Remote Code Execution
CVE-2026-77482 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.8%Remote Code Execution
CVE-2026-77483 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%Elevation of Privilege
CVE-2026-77486 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.8%Remote Code Execution
CVE-2026-77487 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%Elevation of Privilege
CVE-2026-78442 Windows OLE DB Remote Code Execution VulnerabilityWindows OLE DB Important 8.80.8%Remote Code Execution
CVE-2026-68787 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 7.80.3%Remote Code Execution
CVE-2026-67376 Microsoft SQL Server Denial of Service VulnerabilitySQL Server Important 7.51.2%Denial of Service
CVE-2026-77485 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 7.00.3%Elevation of Privilege
CVE-2026-67386 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-67390 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-67393 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-67629 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-67630 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-67633 Microsoft SQL Server Denial of Service VulnerabilitySQL Server Important 6.51.1%Denial of Service
CVE-2026-67645 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-67648 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68776 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68777 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68778 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68779 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68780 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68781 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-68784 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.51.0%Information Disclosure
CVE-2026-69562 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.50.9%Information Disclosure
CVE-2026-78441 Windows OLE DB Information Disclosure VulnerabilityWindows OLE DB Important 6.50.9%Information Disclosure
CVE-2026-77488 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 5.50.4%Information Disclosure
CVE-2026-68785 Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server Important 4.91.1%Remote Code Execution
ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft. Microsoft, Windows, Microsoft 365, Azure, and related names are trademarks of the Microsoft group of companies. Data comes from public sources listed on Sources; every item links to its original page. Dates and statuses can change after they are read. Built by Evotec. This is the public demo. It can also run on your own server, with your Microsoft 365 tenant and device data kept inside your network; Evotec can help you deploy and extend it.