Patch tracker / Products / Microsoft SQL Server 2016 (GDR)

Microsoft SQL Server 2016 (GDR): vulnerabilities and security updates

Every CVE affecting Microsoft SQL Server 2016 (GDR) and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
90
Updates (KBs)
19
Actively exploited (KEV)
0
Critical Severity
1

CVEs affecting Microsoft SQL Server 2016 (GDR)

CVESeverityCVSSEPSSStatus
CVE-2024-21907High8.833%-
CVE-2025-47997High8.833%-
CVE-2025-55227High8.833%-
CVE-2024-49000High8.811%-
CVE-2025-49719High7.511%-
CVE-2026-54118Critical9.81.5%-
CVE-2024-37965High8.82.2%-
CVE-2024-37980High8.82.2%-
CVE-2026-21262High8.82.0%-
CVE-2026-26115High8.82.0%-
CVE-2024-38088High8.81.8%-
CVE-2024-38087High8.81.8%-
CVE-2024-21332High8.81.8%-
CVE-2024-21333High8.81.8%-
CVE-2024-21335High8.81.8%-
CVE-2024-21373High8.81.8%-
CVE-2024-21398High8.81.8%-
CVE-2024-21414High8.81.8%-
CVE-2024-21415High8.81.8%-
CVE-2024-21428High8.81.8%-
CVE-2024-37318High8.81.8%-
CVE-2024-37332High8.81.8%-
CVE-2024-37331High8.81.8%-
CVE-2024-35271High8.81.8%-
CVE-2024-35272High8.81.8%-
CVE-2024-20701High8.81.8%-
CVE-2024-21303High8.81.8%-
CVE-2024-21308High8.81.8%-
CVE-2024-21317High8.81.8%-
CVE-2024-21331High8.81.8%-
CVE-2024-21425High8.81.8%-
CVE-2024-37319High8.81.8%-
CVE-2024-37320High8.81.8%-
CVE-2024-37321High8.81.8%-
CVE-2024-37322High8.81.8%-
CVE-2024-37323High8.81.8%-
CVE-2024-37324High8.81.8%-
CVE-2024-21449High8.81.8%-
CVE-2024-37326High8.81.8%-
CVE-2024-37327High8.81.8%-
CVE-2024-37328High8.81.8%-
CVE-2024-37329High8.81.8%-
CVE-2024-37330High8.81.8%-
CVE-2024-37334High8.81.8%-
CVE-2024-37333High8.81.8%-
CVE-2024-37336High8.81.8%-
CVE-2024-28928High8.81.8%-
CVE-2024-35256High8.81.8%-
CVE-2025-49758High8.81.7%-
CVE-2025-53727High8.81.7%-
CVE-2025-24999High8.81.7%-
CVE-2025-49759High8.81.7%-
CVE-2024-38255High8.81.6%-
CVE-2024-43459High8.81.6%-
CVE-2024-43462High8.81.6%-
CVE-2024-48994High8.81.6%-
CVE-2024-48995High8.81.6%-
CVE-2024-48996High8.81.6%-
CVE-2024-48993High8.81.6%-
CVE-2024-48997High8.81.6%-
CVE-2024-48998High8.81.6%-
CVE-2024-48999High8.81.6%-
CVE-2024-49001High8.81.6%-
CVE-2024-49002High8.81.6%-
CVE-2024-49003High8.81.6%-
CVE-2024-49004High8.81.6%-
CVE-2024-49005High8.81.6%-
CVE-2024-49007High8.81.6%-
CVE-2024-49006High8.81.6%-
CVE-2024-49008High8.81.6%-
CVE-2024-49009High8.81.6%-
CVE-2024-49010High8.81.6%-
CVE-2024-49011High8.81.6%-
CVE-2024-49012High8.81.6%-
CVE-2024-49013High8.81.6%-
CVE-2024-49014High8.81.6%-
CVE-2024-49015High8.81.6%-
CVE-2024-49016High8.81.6%-
CVE-2024-49017High8.81.6%-
CVE-2024-49018High8.81.6%-
CVE-2026-47295High8.81.5%-
CVE-2026-55002High8.81.5%-
CVE-2024-37341High8.81.4%-
CVE-2025-59499High8.81.1%-
CVE-2026-40370High8.81.0%-
CVE-2026-32167High8.80.9%-
CVE-2026-32176High8.80.9%-
CVE-2024-49043High7.81.6%-
CVE-2024-49021High7.81.6%-
CVE-2026-47296High7.51.5%-

Updates (KBs) for Microsoft SQL Server 2016 (GDR)

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50652262025-09-09High8.833%3-
KB50587182025-07-08High8.811%2-
KB51023402026-07-14Critical9.81.5%4-
KB50774742026-03-10High8.82.0%2-
KB50409362024-07-09High8.81.8%38-
KB50409392024-07-09High8.81.8%38-
KB50409402024-07-09High8.81.8%37-
KB50409422024-07-09High8.81.8%36-
KB50409442024-07-09High8.81.8%37-
KB50409462024-07-09High8.81.8%37-
KB50409482024-07-09High8.81.8%38-
KB50409862024-07-09High8.81.8%38-
KB50637622025-08-12High8.81.7%4-
KB50422072024-09-10High8.81.7%2-
KB50468552024-11-12High8.81.6%30-
KB50460632024-09-10High8.81.4%1-
KB50684012025-11-11High8.81.1%1-
KB50892712026-05-12High8.81.0%1-
KB50848212026-04-14Medium6.70.3%2-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5122882: patch details KB5123099: the full CVE list KB5120708 download and what it fixes KB5122871 install notes and severity KB5129235 install notes and severity KB5122878: patch details KB5120238 download and what it fixes KB5129238 download and what it fixes
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.