Microsoft SQL Server SQL Server 2025 Update Version 17.0.1115.1
Views
68
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5091223 updates SQL Server 2025 to build 17.0.1115.1 and addresses CVE-2026-40370, a remote code execution vulnerability. It also includes an XXE security fix in Integration Services and notes a linked server issue with MSDASQL.
Update Details
Security
- Fixes CVE-2026-40370: SQL Server Remote Code Execution Vulnerability.
- Addresses an XML external entity (XXE) vulnerability in the Web Service Task that could allow arbitrary file reads or a denial-of-service attack.
Known Issues
- Linked server queries that use MSDASQL with a provider string (
@provstr) can fail with error 7416:Access to the remote server is denied because no login-mapping exists. - A stricter Database Engine connection validation check can reject some linked server configurations that use the MSDASQL provider.
Hints
- Applies to SQL Server 2025 on Windows and SQL Server 2025 on Linux.
- Updated product version:
17.0.1115.1(file version2025.170.1115.1).
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2025
Version: 17.0.1115.1
Vendor information published: May 12, 2026
Original release notes: View on vendor site
Published on updatealert.io: Sep 29, 2026