updatealert.io Logo
Microsoft SQL Server SQL Server 2025 logo

Microsoft SQL Server SQL Server 2025 Update Version 17.0.1125.2

Views
56

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

KB5102333 updates SQL Server 2025 to 17.0.1125.2 and fixes multiple security vulnerabilities, including elevation of privilege, information disclosure, and remote code execution issues. It also includes several engine and Integration Services fixes.

Update Details

Security

  • Fixes CVE-2026-47295, CVE-2026-47296, CVE-2026-50468, CVE-2026-54116, CVE-2026-54117, CVE-2026-54118, and CVE-2026-55002.
  • Upgrades SSIS password-based encryption to PBKDF2 with SHA-256 and 100,000 iterations for packages targeting SQL Server 2025.
  • Removes legacy BinaryMessageFormatter support in MessageQueueTask to prevent remote code execution from untrusted MSMQ messages.
  • Restricts SoapFormatter deserialization in MessageQueueTask with an allow-list binder to reduce RCE risk from untrusted MSMQ messages.
  • Prevents unintended EXECUTE permission inheritance for EXTERNAL MODEL objects when a principal ID is reused.
  • Fixes a vector intrinsic memory disclosure issue affecting low-privilege authenticated users when varchar(max) is used with vector functions.
  • Adds input validation and sanitization for a parameter passed to an internal replication stored procedure.
  • Fixes an SQL injection issue in SQL Server Agent that could allow authenticated attackers to elevate privileges over the network.

Bug Fixes

  • Resolves a memory leak when sys.dm_exec_input_buffer or DBCC INPUTBUFFER is used.
  • Includes several engine fixes across Integration Services, metadata, programmability, query execution, replication, and SQL Agent.

Known Issues

  • Linked server queries that use MSDASQL with a provider string can fail with error 7416: access to the remote server is denied because no login-mapping exists.

Hints

  • SQL Server components are updated to product version 17.0.1125.2 and file version 2025.170.1125.2.
  • For SQL Server on Windows, Microsoft recommends enabling encryption with Extended Protection.
  • Packages saved after the SSIS encryption change require compatible versions of SSDT and SSMS to open.
  • The update applies to SQL Server 2025 on Windows and Linux, all editions.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2025

Version: 17.0.1125.2

Vendor information published: Jul 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 29, 2026

View All Updates