Patch tracker / Products / Microsoft SQL Server 2025 (CU9)

Microsoft SQL Server 2025 (CU9): vulnerabilities and security updates

Every CVE affecting Microsoft SQL Server 2025 (CU9) and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
23
Updates (KBs)
1
Actively exploited (KEV)
0
Critical Severity
0

CVEs affecting Microsoft SQL Server 2025 (CU9)

CVESeverityCVSSEPSSStatus
CVE-2026-65674High8.81.6%-
CVE-2026-94512High8.80.7%-
CVE-2026-67625High8.50.6%-
CVE-2026-68883High8.50.6%-
CVE-2026-85886High8.50.4%-
CVE-2026-96956High8.00.6%-
CVE-2026-85888High7.70.8%-
CVE-2026-88081High7.70.8%-
CVE-2026-88083High7.50.5%-
CVE-2026-116933High7.2--
CVE-2026-85919High7.00.2%-
CVE-2026-88082High7.00.2%-
CVE-2026-88088High7.00.2%-
CVE-2026-85876High7.00.2%-
CVE-2026-70189Medium6.70.3%-
CVE-2026-88089Medium6.70.3%-
CVE-2026-32176Medium6.70.3%-
CVE-2026-83945Medium6.60.5%-
CVE-2026-67626Medium6.50.9%-
CVE-2026-88085Medium6.40.2%-
CVE-2026-88086Medium5.30.4%-
CVE-2026-94520Medium4.90.8%-
CVE-2026-67628Medium4.90.8%-

Updates (KBs) for Microsoft SQL Server 2025 (CU9)

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51269672026-10-13High8.81.6%23-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5126651: the full CVE list KB5126655 install notes and severity KB5126657: the full CVE list KB5126646 install notes and severity KB5122876 install notes and severity KB5126868 install notes and severity KB5126052 install notes and severity KB5127648: patch details KB5122882: the full CVE list CVE-2026-111497: severity and the patch
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.