Views
178

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5122775 updates SQL Server 2017 GDR to 14.0.2130.4 and fixes many security vulnerabilities, including multiple CVEs for elevation of privilege, remote code execution, information disclosure, and denial of service. It also includes a known issue affecting linked server queries that use MSDASQL.

Update Details

Security

  • Fixes multiple vulnerabilities in SQL Server 2017, including elevation of privilege, remote code execution, information disclosure, and denial of service issues.
  • CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67376, CVE-2026-67380, CVE-2026-67381, CVE-2026-67385, CVE-2026-67386, CVE-2026-67388, CVE-2026-67390, CVE-2026-67393, CVE-2026-67629, CVE-2026-67630, CVE-2026-67631, CVE-2026-67633, CVE-2026-67639, CVE-2026-67645, CVE-2026-67648, CVE-2026-68775, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-68786, CVE-2026-68787, CVE-2026-69562, CVE-2026-73028, CVE-2026-77480, CVE-2026-77481, CVE-2026-77482, CVE-2026-77483, CVE-2026-77485, CVE-2026-77486, CVE-2026-77487, CVE-2026-77488, CVE-2026-78441, CVE-2026-78442

Bug Fixes

  • Fixes a linked server issue where queries using MSDASQL with a provider string can fail with error 7416 due to stricter connection validation.
  • Includes reliability and security fixes for SQL Server Agent, replication, XML processing, Extended Events, In-Memory OLTP, backup restore, and query execution.

Known Issues

  • Linked server queries that use MSDASQL and specify a provider string can fail with error 7416: Access to the remote server is denied because no login-mapping exists.

Hints

  • To help secure SQL Server on Windows, enable encryption with Extended Protection.
  • Prerequisite: SQL Server 2017 or any SQL Server 2017 GDR release through this SQL Server 2017 GDR must already be installed.
  • The update is available through Windows Update, Microsoft Update Catalog, and Microsoft Download Center.
  • Microsoft Update Catalog detection logic has been updated for this and future SQL Server security releases.
  • The Microsoft Update Catalog package is available for all servers running SQL Server, even if Reporting Services is not installed; installation is optional on computers that do not host SQL Server Reporting Services.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2017

Version: 14.0.2130.4

Vendor information published: Sep 8, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 26, 2026