KB5122769: CVEs fixed (Windows update (KB))

KB5122769 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-67643 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
• CVE-2026-67631 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Applies to

• Microsoft SQL Server 2025 for x64-based Systems (CU8) · fixed in 17.0.4085.5

← Back to latest CVEs