Microsoft SQL Server SQL Server 2017 Update Version 14.0.2130.4
Your rating
Rate update installation process
Risk factor
No ratings yet. Be the first to rate this update.
AI enhanced content
Update Summary
KB5122775 updates SQL Server 2017 GDR to 14.0.2130.4 and fixes many security vulnerabilities, including multiple CVEs for elevation of privilege, remote code execution, information disclosure, and denial of service. It also includes a known issue affecting linked server queries that use MSDASQL.
Update Details
Security
- Fixes multiple vulnerabilities in SQL Server 2017, including elevation of privilege, remote code execution, information disclosure, and denial of service issues.
- CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67376, CVE-2026-67380, CVE-2026-67381, CVE-2026-67385, CVE-2026-67386, CVE-2026-67388, CVE-2026-67390, CVE-2026-67393, CVE-2026-67629, CVE-2026-67630, CVE-2026-67631, CVE-2026-67633, CVE-2026-67639, CVE-2026-67645, CVE-2026-67648, CVE-2026-68775, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-68786, CVE-2026-68787, CVE-2026-69562, CVE-2026-73028, CVE-2026-77480, CVE-2026-77481, CVE-2026-77482, CVE-2026-77483, CVE-2026-77485, CVE-2026-77486, CVE-2026-77487, CVE-2026-77488, CVE-2026-78441, CVE-2026-78442
Bug Fixes
- Fixes a linked server issue where queries using MSDASQL with a provider string can fail with error 7416 due to stricter connection validation.
- Includes reliability and security fixes for SQL Server Agent, replication, XML processing, Extended Events, In-Memory OLTP, backup restore, and query execution.
Known Issues
- Linked server queries that use MSDASQL and specify a provider string can fail with error 7416:
Access to the remote server is denied because no login-mapping exists.
Hints
- To help secure SQL Server on Windows, enable encryption with Extended Protection.
- Prerequisite: SQL Server 2017 or any SQL Server 2017 GDR release through this SQL Server 2017 GDR must already be installed.
- The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
- Microsoft Update Catalog detection logic has been updated for this and future SQL Server security releases.
- The Microsoft Update Catalog package is available for all servers running SQL Server, even if Reporting Services is not installed; installation is optional on computers that do not host SQL Server Reporting Services.
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2017
Version: 14.0.2130.4
Vendor information published: Sep 8, 2026
Original release notes: View on vendor site
Published on updatealert.io: Sep 26, 2026