Patch tracker / Products / Microsoft SQL Server 2022 (CU 25)

Microsoft SQL Server 2022 (CU 25): vulnerabilities and security updates

Every CVE affecting Microsoft SQL Server 2022 (CU 25) and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
8
Updates (KBs)
2
Actively exploited (KEV)
0
Critical Severity
4

CVEs affecting Microsoft SQL Server 2022 (CU 25)

CVESeverityCVSSEPSSStatus
CVE-2026-50468Critical9.81.5%-
CVE-2026-54116Critical9.81.5%-
CVE-2026-54117Critical9.81.5%-
CVE-2026-54118Critical9.81.5%-
CVE-2026-47295High8.81.5%-
CVE-2026-55002High8.81.5%-
CVE-2026-47297High8.11.7%-
CVE-2026-47296High7.51.5%-

Updates (KBs) for Microsoft SQL Server 2022 (CU 25)

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51013462026-09-08Critical9.81.5%8-
KB51013472026-09-08Critical9.81.5%5-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5122882: patch details KB5123099: the full CVE list KB5120708 download and what it fixes KB5122871 install notes and severity KB5129235 install notes and severity KB5122878: patch details KB5129238: patch details KB5120238: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.