Microsoft SQL Server Remote Code Execution Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-116942 · score 8.8/10

What could go wrong?

An attacker could run their own programs on your computer from far away, without sitting at it.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Microsoft SQL Server 2025 for x64-based Systems CU10, Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2019 for x64-based Systems (CU32), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2019 for x64-based Systems (GDR)

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5129299, KB5132747, KB5129300, KB5132745, KB5132748, KB5132746. Official page.