Patch tracker / Products / Microsoft SQL Server 2025 CU10

Microsoft SQL Server 2025 CU10: vulnerabilities and security updates

Every CVE affecting Microsoft SQL Server 2025 CU10 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
57
Updates (KBs)
1
Actively exploited (KEV)
0
Critical Severity
1

CVEs affecting Microsoft SQL Server 2025 CU10

CVESeverityCVSSEPSSStatus
CVE-2026-116945Critical9.8--
CVE-2026-94512High8.80.7%-
CVE-2026-116930High8.8--
CVE-2026-116934High8.8--
CVE-2026-116941High8.8--
CVE-2026-116942High8.8--
CVE-2026-116946High8.8--
CVE-2026-118105High8.8--
CVE-2026-118109High8.8--
CVE-2026-118110High8.8--
CVE-2026-118120High8.8--
CVE-2026-67372High8.8--
CVE-2026-67374High8.8--
CVE-2026-67387High8.8--
CVE-2026-67391High8.8--
CVE-2026-67632High8.8--
CVE-2026-67637High8.8--
CVE-2026-67646High8.8--
CVE-2026-94511High8.8--
CVE-2026-96956High8.00.6%-
CVE-2026-118106High8.1--
CVE-2026-66813High8.1--
CVE-2026-118111High8.0--
CVE-2026-118112High8.0--
CVE-2026-118113High8.0--
CVE-2026-118117High8.0--
CVE-2026-118118High8.0--
CVE-2026-118119High8.0--
CVE-2026-94513High8.0--
CVE-2026-116929High7.5--
CVE-2026-116931High7.5--
CVE-2026-116937High7.5--
CVE-2026-116938High7.5--
CVE-2026-116943High7.5--
CVE-2026-116947High7.5--
CVE-2026-118108High7.5--
CVE-2026-118114High7.5--
CVE-2026-118115High7.5--
CVE-2026-84010High7.5--
CVE-2026-88111High7.5--
CVE-2026-116933High7.2--
CVE-2026-116936High7.2--
CVE-2026-116944High7.2--
CVE-2026-118116High7.0--
CVE-2026-88089Medium6.70.3%-
CVE-2026-68781Medium6.51.0%-
CVE-2026-83945Medium6.60.5%-
CVE-2026-116932Medium6.5--
CVE-2026-116935Medium6.5--
CVE-2026-118103Medium6.5--
CVE-2026-118104Medium6.5--
CVE-2026-67382Medium6.5--
CVE-2026-68783Medium6.5--
CVE-2026-118102Medium5.9--
CVE-2026-116939Medium5.7--
CVE-2026-94520Medium4.90.8%-
CVE-2026-116940Medium4.9--

Updates (KBs) for Microsoft SQL Server 2025 CU10

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51292992026-11-10Critical9.81.0%57-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.