Patch tracker / Products / Microsoft SQL Server 2022 (GDR)

Microsoft SQL Server 2022 (GDR): vulnerabilities and security updates

Every CVE affecting Microsoft SQL Server 2022 (GDR) and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
89
Updates (KBs)
15
Actively exploited (KEV)
0
Critical Severity
27

CVEs affecting Microsoft SQL Server 2022 (GDR)

CVESeverityCVSSEPSSStatus
CVE-2025-47997High8.833%-
CVE-2025-55227High8.833%-
CVE-2025-49717High8.511%-
CVE-2025-49719High7.511%-
CVE-2025-49718High7.511%-
CVE-2026-66816Critical9.81.7%-
CVE-2026-67386Critical9.81.7%-
CVE-2026-67389Critical9.81.7%-
CVE-2026-67390Critical9.81.7%-
CVE-2026-67393Critical9.81.7%-
CVE-2026-67624Critical9.81.7%-
CVE-2026-67629Critical9.81.7%-
CVE-2026-67630Critical9.81.7%-
CVE-2026-67631Critical9.81.7%-
CVE-2026-67633Critical9.81.7%-
CVE-2026-67641Critical9.81.7%-
CVE-2026-67643Critical9.81.7%-
CVE-2026-67645Critical9.81.7%-
CVE-2026-67648Critical9.81.7%-
CVE-2026-68776Critical9.81.7%-
CVE-2026-68777Critical9.81.7%-
CVE-2026-68778Critical9.81.7%-
CVE-2026-68779Critical9.81.7%-
CVE-2026-68780Critical9.81.7%-
CVE-2026-68781Critical9.81.7%-
CVE-2026-68784Critical9.81.7%-
CVE-2026-68785Critical9.81.7%-
CVE-2026-73029Critical9.81.7%-
CVE-2026-77488Critical9.81.7%-
CVE-2026-54118Critical9.81.5%-
CVE-2026-67378Critical9.01.7%-
CVE-2026-67636Critical9.01.7%-
CVE-2024-37338High8.82.2%-
CVE-2024-37335High8.82.2%-
CVE-2024-37340High8.82.2%-
CVE-2024-37339High8.82.2%-
CVE-2024-26186High8.82.2%-
CVE-2024-26191High8.82.2%-
CVE-2024-37965High8.82.2%-
CVE-2024-37980High8.82.2%-
CVE-2026-21262High8.82.0%-
CVE-2026-26115High8.82.0%-
CVE-2024-37334High8.81.8%-
CVE-2025-49758High8.81.7%-
CVE-2025-53727High8.81.7%-
CVE-2025-24999High8.81.7%-
CVE-2025-49759High8.81.7%-
CVE-2025-47954High8.81.7%-
CVE-2026-66814High8.81.7%-
CVE-2026-66818High8.81.7%-
CVE-2026-66819High8.81.7%-
CVE-2026-66820High8.81.7%-
CVE-2026-67368High8.81.7%-
CVE-2026-67370High8.81.7%-
CVE-2026-67380High8.81.7%-
CVE-2026-67381High8.81.7%-
CVE-2026-67384High8.81.7%-
CVE-2026-67385High8.81.7%-
CVE-2026-67388High8.81.7%-
CVE-2026-67639High8.81.7%-
CVE-2026-68775High8.81.7%-
CVE-2026-68786High8.81.7%-
CVE-2026-73028High8.81.7%-
CVE-2026-77480High8.81.7%-
CVE-2026-77481High8.81.7%-
CVE-2026-77483High8.81.7%-
CVE-2026-77484High8.81.7%-
CVE-2026-77487High8.81.7%-
CVE-2026-78456High8.81.7%-
CVE-2026-47295High8.81.5%-
CVE-2026-55002High8.81.5%-
CVE-2024-37341High8.81.4%-
CVE-2025-59499High8.81.1%-
CVE-2026-40370High8.81.0%-
CVE-2026-32167High8.80.9%-
CVE-2026-32176High8.80.9%-
CVE-2026-33120High8.80.9%-
CVE-2026-67379High8.51.7%-
CVE-2026-47297High8.11.7%-
CVE-2026-68787High7.81.7%-
CVE-2024-49043High7.81.6%-
CVE-2024-49021High7.81.6%-
CVE-2026-67376High7.51.7%-
CVE-2026-47296High7.51.5%-
CVE-2024-37966High7.12.2%-
CVE-2024-37337High7.12.2%-
CVE-2024-37342High7.12.2%-
CVE-2026-20803High7.21.3%-
CVE-2026-77485High7.01.7%-

Updates (KBs) for Microsoft SQL Server 2022 (GDR)

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50587122025-07-08High8.511%3-
KB51227712026-09-08Critical9.81.7%52-
KB51023342026-07-14Critical9.81.5%4-
KB50422112024-09-10High8.82.2%11-
KB50774652026-03-10High8.82.0%2-
KB50637562025-08-12High8.81.7%5-
KB50407112024-07-09High8.81.6%1-
KB50407122024-07-09High8.81.6%1-
KB50460572024-09-10High8.81.4%1-
KB50652212025-09-09High8.81.4%2-
KB50684072025-11-11High8.81.1%1-
KB50911582026-05-12High8.81.0%1-
KB50848152026-04-14High8.80.9%3-
KB50468612024-11-12High7.80.8%2-
KB50730312026-01-13High7.21.3%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5122882: patch details KB5123099: the full CVE list KB5120708 download and what it fixes KB5122871 install notes and severity KB5129235 install notes and severity KB5122878: patch details KB5120238 download and what it fixes KB5129238 download and what it fixes
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.