SQL Server 2017-2025 版本 2026 年 10 月安全更新,修复 CVE-2026-32176 特权提升漏洞
SQL Server 2017-2025 版本 2026 年 10 月安全更新,修复 CVE-2026-32176 特权提升漏洞
Microsoft SQL Server 下载汇总
SQL Server GDR 和 CU 更新汇总
请访问原文链接:https://sysin.org/blog/sql-server/ 查看最新版。原创作品,转载请保留出处。
作者主页:sysin.org

Microsoft SQL Server 曝出特权提升漏洞,建议用户及时安装安全更新
今天(2026 年 10 月 17 日),Microsoft SQL Server 被披露存在一项特权提升漏洞,编号为 CVE-2026-32176。根据 Microsoft Security Response Center(MSRC)及 Microsoft 发布的相关安全更新资料,该漏洞属于 SQL Server 特权提升漏洞(Elevation of Privilege Vulnerability)。
特权提升漏洞可能使攻击者在满足相应攻击条件的情况下,获得超出其原有权限的访问能力,从而影响数据库系统的安全性。对于部署 SQL Server 的企业和组织而言,应及时关注该漏洞的官方公告,评估自身数据库环境的受影响情况,并采取相应的安全防护措施。
✅ 受影响产品与修复措施
根据 Microsoft 发布的 2026 年 10 月安全更新信息,相关 SQL Server 安全更新涵盖以下版本:
- SQL Server 2025 RTM CU9:KB5126967
- SQL Server 2025 RTM GDR:KB5128492
- SQL Server 2022 RTM CU27:KB5126934
- SQL Server 2022 RTM GDR:KB5128493
- SQL Server 2019 RTM CU32:KB5128494
- SQL Server 2019 RTM GDR:KB5128495
- SQL Server 2017 RTM CU31:KB5128496
- SQL Server 2017 RTM GDR:KB5128497
管理员应根据实际部署版本及更新分支,选择适用的安全更新包。相关更新可通过 Microsoft Download Center 和 Microsoft Update Catalog 等渠道获取。不同 SQL Server 版本对应不同的更新包,安装前应核对适用版本和 KB 编号。
安全更新汇总
✅ Security Update for SQL Server 2025 RTM CU9
2026 年 10 月 17 日(星期六)
SQL Server 2025 RTM CU9 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2025 RTM CUs 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2025 RTM CU9 安全更新 KB Article:KB5126967
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5126967 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2025 RTM
2026 年 10 月 17 日(星期六)
SQL Server 2025 RTM GDR 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2025 RTM 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2025 RTM GDR 安全更新 KB Article:KB5128492
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5128492 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2022 RTM CU27
2026 年 10 月 17 日(星期六)
SQL Server 2022 RTM CU27 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2022 RTM CUs 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2022 RTM CU27 安全更新 KB Article:KB5126934
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5126934 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2022 RTM
2026 年 10 月 17 日(星期六)
SQL Server 2022 RTM GDR 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2022 RTM 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2022 RTM GDR 安全更新 KB Article:KB5128493
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5128493 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2019 RTM CU32
2026 年 10 月 17 日(星期六)
SQL Server 2019 RTM CU32 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2019 RTM CUs 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2019 RTM CU32 安全更新 KB Article:KB5128494
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5128494 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2019 RTM
2026 年 10 月 17 日(星期六)
SQL Server 2019 RTM GDR 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2019 RTM 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2019 RTM GDR 安全更新 KB Article:KB5128495
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5128495 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2017 RTM CU31
2026 年 10 月 17 日(星期六)
SQL Server 2017 RTM CU31 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2017 RTM CUs 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2017 RTM CU31 安全更新 KB Article:KB5128496
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5128496 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
✅ Security Update for SQL Server 2017 RTM
2026 年 10 月 17 日(星期六)
SQL Server 2017 RTM GDR 的安全更新现已在 Microsoft Download Center 和 Microsoft Update Catalog 网站上提供下载。
此更新包累积包含此前针对 SQL Server 2017 RTM 发布的所有安全修复,以及 KB Article 中详细说明的新增安全修复。
- 安全公告:CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server 拒绝服务漏洞(Denial of Service Vulnerability)
- SQL Server 2017 RTM GDR 安全更新 KB Article:KB5128497
- Microsoft Download Center:
https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b - Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=5128497 - Microsoft SQL Server 最新更新:
https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates
下载链接
Microsoft SQL Server
上述文件仅适用于 Windows Server 部署。要安装 SQL Server on Linux (sysin),请访问此处。
最新的 SQL Server 版本
Each of the following links provides information for all of the applicable products and technologies.
| Version | Latest service pack | Latest GDR | Latest cumulative update |
|---|---|---|---|
| SQL Server 2025 - Build information - Installation | None | GDR (17.0.1145.4 - October 2026) | CU9 for 2025 (17.0.5005.3 - September 2026) CU9 + GDR for 2025 (17.0.5015.4 - October 2026) |
| SQL Server 2022 - Build information - Installation | None | GDR (16.0.1210.3 - October 2026) | CU27 for 2022 (16.0.4295.3 - September 2026) CU27 + GDR for 2022 (16.0.4305.5 - October 2026) |
| SQL Server 2019 - Build information - Installation | None | GDR (15.0.2200.2 - October 2026) | CU32 for 2019 (15.0.4430.1 - February 2025) CU32 + GDR for 2019 (15.0.4500.2 - October 2026) |
| SQL Server 2017 - Build information - Installation | Azure Connect feature pack (14.0.3490.10 - March 2025) | GDR (14.0.2140.2 - October 2026) | CU31 for 2017 (14.0.3456.2 - September 2022) CU31 + GDR for 2017 (14.0.3560.2 - October 2026) |
| SQL Server 2016 - Build information - Installation | Azure Connect feature pack (13.0.7000.253 - May 2022) SP3 (13.0.6300.2 - September 2021) SP2 (13.0.5026.0 - April 2018) SP1 (13.0.4001.0 - November 2016) | GDR for Azure Connect feature pack (13.0.7095.1 - July 2026) GDR for SP3 (13.0.6500.1 - July 2026) GDR for SP2 (13.0.5108.50 - June 2022) GDR for SP1 (13.0.4259.0 - July 2019) GDR (13.0.1745.2 - January 2018) | CU17 for 2016 SP2 (13.0.5888.11 - March 2021) CU15 for 2016 SP1 (13.0.4574.0 - May 2019) CU9-ADV180002 for 2016 RTM (13.0.2218.0 - January 2018) CU17 + GDR for SP2 (13.0.5893.48 - June 2022) CU15 + GDR for SP1 (13.0.4604.0 - July 2019) |
| SQL Server 2014 - Build information - Installation | SP3 (12.0.6024.0 - October 2018) SP2 (12.0.5000.0 - July 2016) SP1 (12.0.4100.1 - May 2015) | GDR for SP3 (12.0.6179.1 - October 2023) GDR for SP2 (12.0.5223.6 - July 2019) GDR for SP1 (12.0.4237.0 - August 2017) GDR (12.0.2269.0 - July 2015) | CU4 for 2014 SP3 (12.0.6329.1 - July 2019) CU18 for 2014 SP2 (12.0.5687.1 - July 2019) CU13 for 2014 SP1 (12.0.4522.0 - August 2017) CU14 for 2014 RTM (12.0.2569.0 - June 2016) CU4 + GDR for SP3 (12.0.6449.1 - October 2023) CU17 + GDR for SP2 (12.0.5659.1 - July 2019) |
| SQL Server 2012 - Build information - Installation | SP4 (11.0.7001.0 - October 2017) SP3 (11.0.6020.0 - November 2015) SP2 (11.0.5058.0 - June 2015) SP1 (11.0.3000.00 - November 2012) | GDR for SP4 (11.0.7512.11 - February 2023) GDR for SP3 (11.0.6614.2 - January 2018) GDR for SP2 (11.0.5676.0 - November 2016) GDR for SP1 (11.0.3156.00 - July 2015) GDR (11.0.2376.00 - October 2012) | CU10 for 2012 SP3 (11.0.6607.3 - August 2017) CU16 for 2012 SP2 (11.0.5678.0 - January 2017) CU13 for 2012 SP1 (11.0.3482.00 - November 2014) CU11 for 2012 RTM (11.0.2424.00 - December 2013) |
| SQL Server 2008 R2 - Build information - Installation | SP3 (10.50.6000.34 - September 2014) SP2 (10.50.4000.0 - July 2012) SP1 (10.50.2500.0 - July 2011) | GDR for SP3 (10.50.6785.2 - February 2023) GDR for SP2 (10.50.4042.00 - July 2015) GDR (10.50.2550.00 - October 2012) GDR (10.50.1617.00 - June 2011) | CU12 for 2008 R2 SP2 (10.50.4305.00 - August 2014) CU14 for 2008 R2 SP1 (10.50.2881.00 - August 2013) CU13 for 2008 R2 RTM (10.50.1815.00 - April 2012) |
| SQL Server 2008 - Build information - Servicing | SP4 (10.00.6000.29 - September 2014) SP3 (10.00.5500.00 - October 2011) SP2 (10.00.4000.00 - September 2010) SP1 (10.00.2531.00 - April 2009) | GDR for SP4 (10.0.6814.4 - February 2023) GDR for SP3 (10.00.5538.00 - July 2015) GDR for SP2 (10.00.4067.00 - October 2012) GDR for SP1 (10.00.2573.00 - June 2011) | CU17 for 2008 SP3 (10.00.5861.00 - May 2014) CU11 for 2008 SP2 (10.00.4333.00 - July 2012) CU16 for 2008 SP1 (10.00.2850.0 - September 2011) CU10 for 2008 RTM (10.00.1835.00 - March 2010) |
更多:Windows 下载汇总

今天(2026 年 10 月 17 日),Microsoft SQL Server 被披露存在一项特权提升漏洞,编号为 CVE-2026-32176。根据 Microsoft Security Response Center(MSRC)及 Microsoft 发布的相关安全更新资料,该漏洞属于 SQL Server 特权提升漏洞(Elevation of Privilege Vulnerability)。
浙公网安备 33010602011771号