Patch tracker / Products / Microsoft SQL Server 2025 (GDR)

Microsoft SQL Server 2025 (GDR): vulnerabilities and security updates

Every CVE affecting Microsoft SQL Server 2025 (GDR) and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
63
Updates (KBs)
9
Actively exploited (KEV)
0
Critical Severity
0

CVEs affecting Microsoft SQL Server 2025 (GDR)

CVESeverityCVSSEPSSStatus
CVE-2026-66814High8.81.1%-
CVE-2026-66818High8.81.1%-
CVE-2026-66819High8.81.1%-
CVE-2026-66820High8.81.1%-
CVE-2026-67368High8.81.1%-
CVE-2026-67370High8.81.1%-
CVE-2026-67380High8.81.1%-
CVE-2026-67381High8.81.1%-
CVE-2026-67384High8.81.1%-
CVE-2026-67385High8.81.1%-
CVE-2026-67388High8.81.1%-
CVE-2026-67631High8.81.1%-
CVE-2026-67639High8.81.1%-
CVE-2026-67643High8.81.1%-
CVE-2026-68775High8.81.1%-
CVE-2026-68785High8.81.1%-
CVE-2026-68786High8.81.1%-
CVE-2026-73028High8.81.1%-
CVE-2026-77480High8.81.1%-
CVE-2026-77481High8.81.1%-
CVE-2026-77483High8.81.1%-
CVE-2026-77484High8.81.1%-
CVE-2026-77487High8.81.1%-
CVE-2026-78456High8.81.1%-
CVE-2026-67373High8.81.1%-
CVE-2026-67638High8.81.1%-
CVE-2026-67642High8.81.1%-
CVE-2026-77482High8.81.1%-
CVE-2026-77486High8.81.1%-
CVE-2026-78442High8.81.1%-
CVE-2026-67378High8.51.1%-
CVE-2026-67379High8.51.1%-
CVE-2026-67636High8.51.1%-
CVE-2026-47297High8.11.2%-
CVE-2026-68787High7.81.1%-
CVE-2026-67376High7.51.1%-
CVE-2026-20803High7.21.3%-
CVE-2026-77485High7.01.1%-
CVE-2026-66816Medium6.51.1%-
CVE-2026-67386Medium6.51.1%-
CVE-2026-67389Medium6.51.1%-
CVE-2026-67390Medium6.51.1%-
CVE-2026-67393Medium6.51.1%-
CVE-2026-67624Medium6.51.1%-
CVE-2026-67629Medium6.51.1%-
CVE-2026-67630Medium6.51.1%-
CVE-2026-67633Medium6.51.1%-
CVE-2026-67641Medium6.51.1%-
CVE-2026-67645Medium6.51.1%-
CVE-2026-67648Medium6.51.1%-
CVE-2026-68776Medium6.51.1%-
CVE-2026-68777Medium6.51.1%-
CVE-2026-68778Medium6.51.1%-
CVE-2026-68779Medium6.51.1%-
CVE-2026-68780Medium6.51.1%-
CVE-2026-68781Medium6.51.1%-
CVE-2026-68784Medium6.51.1%-
CVE-2026-73029Medium6.51.1%-
CVE-2026-67369Medium6.51.1%-
CVE-2026-67383Medium6.51.1%-
CVE-2026-69562Medium6.51.1%-
CVE-2026-78441Medium6.51.1%-
CVE-2026-77488Medium5.51.1%-

Updates (KBs) for Microsoft SQL Server 2025 (GDR)

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51227682026-09-08High8.81.1%52-
KB51227692026-09-08High8.81.1%56-
KB51227702026-09-08High8.81.1%56-
KB51227712026-09-08High8.81.1%52-
KB51227722026-09-08High8.81.1%52-
KB51227732026-09-08High8.81.1%52-
KB50729362026-01-13High7.21.3%1-
KB50730312026-01-13High7.21.3%1-
KB50731772026-01-13High7.21.3%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5120708 download and what it fixes KB5126052: the full CVE list KB5120238 install notes and severity KB5099540 download and what it fixes KB5099538 install notes and severity KB5122876: patch details KB5120994: patch details KB5120242 download and what it fixes KB5122882: the full CVE list KB5124008 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.