updatealert.io Logo
Microsoft SQL Server SQL Server 2025 logo

Microsoft SQL Server SQL Server 2025 Update Version 17.0.4045.5

Views
139

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5084896 delivers Cumulative Update 5 for Microsoft SQL Server 2025 with seven fixes since CU4. It includes security fixes for an XXE issue in Integration Services and SQL injection in spatial index procedures, plus new lock manager cache and Linux change feed configuration options.

Update Details

Security

  • Fixes an XML External Entity (XXE) vulnerability in the Web Service Task by blocking the file:// protocol in WSDL service endpoints.
  • Fixes a vulnerability that allows SQL injection through sp_help_spatial_geography_index and sp_help_spatial_geometry_index stored procedures.

Bug Fixes

  • Adds a new max lock manager cache memory (%) configuration setting to control the maximum size of lock manager cache memory.
  • Fixes an EntryPointNotFoundException for GetNumaNodeProcessorMask2 during SQL Server setup on older Windows versions.
  • Adds yields during in-memory OLTP garbage collection scans of hash indexes to reduce CPU starvation.
  • Allows FulltextIndexVersion2 to be enabled through the fulltext_index_version database-scoped configuration and fixes incorrect .docx full-text indexing results.
  • Adds support for configuring change feed parameters by using mssql.conf.

New Features

  • Adds a new max lock manager cache memory (%) configuration setting.
  • Allows FulltextIndexVersion2 to be enabled by setting fulltext_index_version to 2.
  • Adds support for configuring change feed parameters by using mssql.conf.

Known Issues

  • Queries that use SESSION_CONTEXT in parallel plans may return incorrect results or trigger access violation dump files.
  • Linked server queries that use MSDASQL with a provider string may fail with error 7416 due to stricter connection validation.

Hints

  • Applies to SQL Server 2025 on Windows and Linux.
  • For SQL Server on Windows, Microsoft recommends enabling encryption with Extended Protection.
  • The update includes SQL Server build 17.0.4045.5 and Analysis Services build 17.0.25.223.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2025

Version: 17.0.4045.5

Vendor information published: May 20, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 29, 2026

View All Updates