KB5122772: what it fixes and who gets it

KB5122772 is a security update from Microsoft's September 2026 release for Microsoft SQL Server 2019 (CU 32).

Microsoft data read
52CVEs fixed
3rated Critical
0already exploited
Yesrestart required

Should you install it?

Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5122772

CVETypeCVSSSeverity
CVE-2026-67631Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-67378Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution9.0Critical
CVE-2026-67636Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution9.0Critical
CVE-2026-66814Microsoft SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-66818Microsoft SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-66819Microsoft SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-66820SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-67368Microsoft SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-67370Microsoft SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-67380Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-67381Microsoft SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-67384Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-67385Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-67388Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-67639Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-68775Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-68786Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-73028SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-77480SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-77481Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-77482Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-77483SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-77484Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-77486Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-77487SQL Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-78442Windows OLE DB Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-67379Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.5Important
CVE-2026-47297Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-68787Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-67376Microsoft SQL Server Denial of Service VulnerabilityDenial of Service7.5Important
CVE-2026-77485SQL Server Elevation of Privilege VulnerabilityElevation of Privilege7.0Important
CVE-2026-67386Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67390Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67393Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67624Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67629Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67630Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67633Microsoft SQL Server Denial of Service VulnerabilityDenial of Service6.5Important
CVE-2026-67645Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-67648Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68776Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68777Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68778Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68779Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68780Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68781Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-68784Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-69562Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-73029Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-78441Windows OLE DB Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-77488Microsoft SQL Server Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-68785Microsoft SQL Server Remote Code Execution VulnerabilityRemote Code Execution4.9Important

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.