Microsoft SQL Server SQL Server 2025 Update Version 17.0.5005.3

KB5122048 delivers Cumulative Update 9 for Microsoft SQL Server 2025, updating SQL Server to 17.0.5005.3. It includes 45 fixes, security hardening, and new Managed Instance link multi-database support.

• Fixes a vulnerability in SQL Server managed backup to Microsoft Azure stored procedures.
• Improves security validation when SQL Server Agent loads task agent components and processes certain input.
• Fixes a security vulnerability in Microsoft Entra authentication sign-in handling.
• Fixes a memory disclosure issue in enclave code class ID lookup and adds bounds validation for attestation fields parsed by sys.sp_describe_parameter_encryption.
• Improves validation of responses from S3-compatible external storage endpoints during external data access.
• Fixes security issues in Extended Events, including memory corruption and information disclosure/denial of service from specially crafted .xel files.
• Strengthens input validation to prevent authenticated users from disclosing limited memory or in-memory information.
• Improves protection of internal replication data and queued updating subscriptions.
• Improves handling of Showplan input and internal event data to better protect information.

• Fixes incorrect SESSION_CONTEXT behavior in parallel plans, including possible access violations.
• Fixes linked server queries using MSDASQL that fail with error 7416.
• Fixes an access violation when querying sys.dm_exec_requests during database recovery.
• Fixes a buffer overflow during authenticated TDS RPC calls that can terminate SQL Server unexpectedly.
• Fixes assertion failure under optimized locking when a forwarded row is requalified.
• Fixes availability group join failures for secondary replicas with 64-character names and cluster type NONE or EXTERNAL.
• Fixes buffer overreads, heap buffer overwrites, and access violations in In-Memory OLTP with malformed or truncated nvarchar/DBCS data.
• Fixes XML handling issues, including DTD attribute lists, large OPTION (USE PLAN) XML declarations, and malformed XML format files used with OPENROWSET(BULK ...) or BULK INSERT.
• Fixes arithmetic overflow and out-of-bounds memory access in LEFT_SHIFT and RIGHT_SHIFT.
• Fixes a tempdb space usage inconsistency reported by sys.dm_db_session_space_usage.
• Fixes the Buffer cache hit ratio counter always showing zero in Performance Monitor.
• Fixes improper field offset validation in SqlDataRecord.SetBytes for sql_variant values when CLR integration is enabled.
• Fixes Change Event Streaming deserialization and dump-file issues.
• Adds support for manual soft-NUMA configuration on Standard and Standard Developer editions.
• Adds multiple-database link mode for Managed Instance link to extend and fail over multi-database availability groups together.

• Adds support for configuring manual soft-NUMA on Standard and Standard Developer editions.
• Adds multiple-database link mode for Managed Instance link.

• SESSION_CONTEXT may return incorrect results or cause access violations in parallel plans.
• Linked server queries using MSDASQL with a provider string may fail with error 7416 due to stricter connection validation.
• Queries against sys.dm_exec_requests during database recovery may raise an access violation; Microsoft recommends trace flag 4696, avoiding those queries, or uninstalling the update until a fix is available.

• To help secure SQL Server on Windows, enable encryption with Extended Protection.
• A downloadable Excel workbook contains build summaries and detailed fix lists for SQL Server 2025, 2022, 2019, and 2017.
• Bug reference IDs in the table can be used as URL bookmarks with the #NNNNNNN format.
• For the recovery-related sys.dm_exec_requests issue, Microsoft suggests trace flag 4696, avoiding affected queries, or uninstalling this update until a fix is available.

Product Information

Vendor: Microsoft

Product: SQL Server

Product type: Software

Variant: SQL Server 2025

Version: 17.0.5005.3

Vendor information published: Sep 15, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 29, 2026