KB5128494

Security update fixing 19 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket

0Windows versions

19CVEs fixed · 0 critical

0Exploited or in CISA KEV

YesRestart required (per MSRC)

Windows release health lists no known issues from this update or the one it builds on, and none it resolves.

Security fixes

19 Microsoft CVEs · most urgent first

CVE	Vulnerability	Severity	CVSS	Impact
CVE-2026-65674	Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server	Important	8.8	RCENetwork
CVE-2026-94512	SQL Server Remote Code Execution VulnerabilitySQL Server	Important	8.8	RCENetwork
CVE-2026-67625	Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server	Important	8.5	RCENetwork
CVE-2026-68883	Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server	Important	8.5	EoPNetwork
CVE-2026-85886	Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server	Important	8.5	RCENetwork
CVE-2026-96956	SQL Server Elevation of Privilege VulnerabilitySQL Server	Important	8.0	EoPNetwork
CVE-2026-85888	Microsoft SQL Server Information Disclosure VulnerabilitySQL Server	Important	7.7	Information DisclosureNetwork
CVE-2026-88081	Microsoft SQL Server Information Disclosure VulnerabilitySQL Server	Important	7.7	Information DisclosureNetwork
CVE-2026-85876	Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server	Important	7.0	EoPLocal
CVE-2026-85919	Microsoft SQL Server Elevation of Privilege VulnerabilitySQL Server	Important	7.0	EoPLocal

Showing the 10 most urgent of 19All 19 CVEs

What changed

First observed 14 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.