KB5125472 - Cumulative Update 28 for SQL Server 2022

Release Date:   November 12, 2026
Version:   16.0.4325.4

Summary

This article describes Cumulative Update package 27 (CU28) for Microsoft SQL Server 2022. This update contains 91 fixes that were issued after the release of SQL Server 2022 Cumulative Update 27. It updates components in the following builds:

  • SQL Server - Product version: 16.0.4325.4, file version: 2022.160.4325.4
  • Analysis Services - Product version: 16.0.43.253, file version: 2022.160.43.253

Important

To help secure SQL Server on Windows, enable encryption with Extended Protection.

Known issues in this update

Incorrect behavior of SESSION_CONTEXT in parallel plans

Queries that use the built-in SESSION_CONTEXT function might return incorrect results or trigger access violation (AV) dump files when run in parallel query plans. This issue occurs because of the manner in which SESSION_CONTEXT interacts with parallel execution threads, particularly if the session is reset for reuse.

For more information, see the Known issues section in SESSION_CONTEXT.

Improvements and fixes included in this update

A downloadable Microsoft Excel workbook that contains a summary list of builds, together with their current support lifecycle, is available. The Excel file also contains detailed fix lists for SQL Server 2022, SQL Server 2019, and SQL Server 2017. Download this Excel file now.

Note

Individual entries in the following table can be referenced directly through a bookmark. If you select any bug reference ID in the table, a bookmark tag is added to the URL by using the "#NNNNNNN" format. You can then share this URL with others so that they can jump directly to the desired fix in the table.

For more information about the bugs that are fixed and enhancements that are included in this cumulative update, see the following table.

Bug reference Description Fix area Component Platform
5216517 Fixes an issue in which monitoring queries that use sys.dm_exec_requests or sys.sysprocesses intermittently fail and return a "976" or "978" error message when they run on a read-intent-only secondary replica in an availability group. SQL Server Engine High Availability and Disaster Recovery Windows
5289354 Fixes an issue that causes performance degradation during online operations and database recovery on SQL Server instances that are configured to have approximately 20 TB or more of memory. SQL Server Engine Transaction Services All
5383173 Fixes error "33550", state "42", that occurs when a secure enclave in SQL Server decrypts empty or NULL values in varchar(max), nvarchar(max), or varbinary(max) columns that use Always Encrypted. SQL Server Engine Security Infrastructure Windows
5419469 Addresses a security vulnerability in PolyBase by improving data validation. SQL Server Engine PolyBase All
5439314 Fixes an issue in which the SQL Server process might end unexpectedly when it accesses external data sources. SQL Server Engine PolyBase All
5478462 Fixes an issue in which an availability group listener that uses a Dynamic Host Configuration Protocol (DHCP) address doesn't come online. SQL Server Engine High Availability and Disaster Recovery Windows
5490933 Fixes an input validation issue in which malformed size values in Virtual Device Interface (VDI) and SQL Server VSS Writer backup operations can cause out-of-bounds memory access. SQL Server Engine Backup Restore Windows
5497299 Fixes an integer-handling issue in backup and restore metadata processing that can cause SQL Server to end unexpectedly or permit elevation of privilege when malformed or oversized input is processed. SQL Server Engine Backup Restore Windows
5505574 Updates a component that's used to extract archives when you install external language and external library packages. SQL Server Engine Extensibility All
5509882 Fixes an issue in which the hadr_log_block_decompression extended event reports the same value for the compressed and uncompressed log block sizes. SQL Server Engine SQL OS All
5523678 Adds validation of FILESTREAM fragment sizes on availability group secondary replicas to reject oversized fragments. SQL Server Engine High Availability and Disaster Recovery All
5529157 Fixes an out-of-bounds memory write action in the SqlDataRecord.SetBytes API for sql_variant values that can cause denial of service or elevation of privilege when common language runtime (CLR) integration is enabled. SQL Server Engine Programmability Windows
5529197 Improves input validation in Showplan processing to enhance security and reliability. SQL Server Engine Query Store Windows
5529340 Improves the protection of internal replication data during processing. SQL Server Engine Replication All
5529352 Improves the handling of text data in merge replication to enhance security and reliability. SQL Server Engine Replication All
5529364 Improves validation and handling of replication operations to enhance security and reliability. SQL Server Engine Replication All
5529376 Improves security and reliability of queued updating subscriptions in transactional replication. SQL Server Engine Replication Windows
5529388 Improves security and reliability of queued updating subscriptions in transactional replication. SQL Server Engine Replication Windows
5558726 Improves validation of shared memory region counts to prevent race conditions during shared memory cleanup. SQL Server Engine PolyBase All
5571551 Fixes a security vulnerability in which opening a SQL Server Virtual Device Interface (VDI) virtual device set can cause an out-of-bounds memory write action. SQL Server Engine Backup Restore All
5571985 Fixes a security vulnerability in which SQL Server can access memory outside the allocated buffer when it processes data transferred during Virtual Device Interface (VDI) backup or restore operations. SQL Server Engine Backup Restore All
5577584 Improves validation of Delta table schemas. SQL Server Engine PolyBase Windows
5578970 Fixes memory corruption and information disclosure vulnerabilities in the SQLSatellite protocol processing that's used by Machine Learning Services and Language Extensions. SQL Server Engine Extensibility All
5581403 Fixes an issue in which MSDASQL-linked server connections might fail if the provider string doesn't include a user ID (UID). SQL Server Engine Distributed Query All
5587164 Fixes an issue in which Multidimensional Expressions (MDX) queries that use nested subselects over ragged hierarchies that are configured by using HideMemberIf omit hidden leaf members. This condition causes missing rows or lower measure totals. Analysis Services Analysis Services Windows
5596464 Fixes an out-of-bounds memory read action that can occur when SQL Server processes certain client connection requests. SQL Connectivity SQL Connectivity All
5614130 Improves identifier validation in merge replication. SQL Server Engine Replication Windows
5620647 Fixes an issue in which change data capture (CDC) or transactional replication fails to process consecutive clustered-key updates to rows with large off-row large object (LOB) values. SQL Server Engine Replication All
5622465 Fixes a heap buffer overflow during XML operation. SQL Server Engine Programmability All
5622545 Improves output-buffer validation in XA stored procedures to prevent buffer overflows. Undersized output buffers now return a "47204" error message. SQL Server Engine Transaction Services All
5622596 Improves identifier validation in transactional replication. SQL Server Engine Replication Windows
5624106 Improves validation of transaction log blocks during recovery and log scanning to prevent out-of-bounds memory read actions when scanning malformed records. SQL Server Engine Storage Management Windows
5624545 Improves security by initializing buffers that are used during index record construction and B-tree page splits. SQL Server Engine Methods to access stored data Windows
5624558 Fixes an issue in which querying a corrupted row-compressed record can return unintended memory content. SQL Server now validates the compressed-record metadata and returns a database corruption error message. SQL Server Engine Methods to access stored data All
5624581 Improves security by initializing buffers that are used during storage engine insert, update, bulk, compression, and record reconstruction operations. SQL Server Engine Methods to access stored data Windows
5624592 Improves validation of long-column offsets in page-compressed records to reject malformed record metadata. SQL Server Engine Methods to access stored data Windows
5624644 Fixes a heap buffer overflow that can occur when SQL Server reads COLUMNSTORE_ARCHIVE-compressed segments with malformed compression block headers. SQL Server Engine Column Stores Windows
5624884 Improves validation of sparse-column record headers and column offsets when SQL Server reads or rebuilds records. SQL Server Engine Methods to access stored data Windows
5624930 Improves validation of columnstore header sizes when SQL Server attaches, restores, or checks a database. SQL Server Engine Column Stores Windows
5624959 Improves validation of variable-length column offsets when SQL Server processes database records. SQL Server Engine Methods to access stored data Windows
5624997 Improves validation of column metadata to prevent out-of-bounds memory write actions when SQL Server loads database schemas. SQL Server Engine Methods to access stored data Windows
5632314 Improves security and reliability of replication security metadata handling during subscriber database restore and upgrade operations. SQL Server Engine Replication Windows
5632802 Improves security and reliability of the Log Reader Agent in heterogeneous transactional replication scenarios. SQL Server Engine Replication Windows
5632815 Improves security and reliability of change feed configuration. SQL Server Engine Replication Windows
5632837 Fixes a security issue in authorization checks for merge replication row metadata. SQL Server Engine Replication All
5632850 Fixes a buffer overflow that occurs if merge replication processes more than 250 WebSync XML nickname entries. SQL Server Engine Replication All
5632863 Improves bounds validation when merge replication processes retry lists. SQL Server Engine Replication Windows
5632876 Improves data validation during replication encryption operations. SQL Server Engine Replication All
5632889 Improves data validation during merge replication web synchronization. SQL Server Engine Replication All
5632929 Improves authorization checks for replication performance counter operations. SQL Server Engine Replication Windows
5634469 Fixes an issue in which a query that applies a string predicate over a window aggregate might return incorrect results if the partitioning column uses a case-insensitive collation. SQL Server Engine Query Optimizer All
5635185 Improves validation and handling of metadata in merge replication operations. SQL Server Engine Replication Windows
5635964 Improves validation of login security identifier (SID) data to prevent out-of-bounds memory read actions when the SQL Trace reader processes malformed trace data. SQL Server Engine Programmability All
5636104 Improves bounds validation and Unicode conversion when processing replication transaction identifiers. SQL Server Engine Replication All
5636147 Improves bounds validation to prevent out-of-bounds memory read actions when SQL Server scans UTF-16 terminators during replication numeric conversion. SQL Server Engine Replication All
5639541 Adds trace flag 697 to disable heap or B-tree (HoBt) schema-latch promotion to superlatches for workloads that experience high CPU usage and latch contention, without disabling all superlatching. SQL Server Engine Methods to access stored data All
5642397 Improves object name validation in internal stored procedures while preserving existing behavior. SQL Server Engine Management Services All
5645714 Improves SQLDiag handling of database names, including long names and Unicode characters, to enhance diagnostic collection reliability and security. SQL Server Client Tools SQLDiag Windows
5650236 Adds trace flag 683 to reduce CPU overhead when heap or B-tree (HoBt) latches are promoted to superlatches but counter partitioning doesn't occur. SQL Server Engine Methods to access stored data All
5653498 Improves security validation during replication database upgrades. SQL Server Engine Replication Windows
5653528 Improves conflict table name validation in transactional replication. SQL Server Engine Replication Windows
5653574 Improves parameter validation in the Replication Queue Reader Agent. SQL Server Engine Replication Windows
5653597 Improves conflict table name handling in merge replication. SQL Server Engine Replication Windows
5653630 Improves security validation for merge replication conflict reporting. SQL Server Engine Replication Windows
5653696 Improves object name validation for merge replication schema changes. SQL Server Engine Replication Windows
5653709 Improves table name handling in generated merge replication procedures. SQL Server Engine Replication Windows
5653723 Improves input validation when SQL Server processes merge replication changes. SQL Server Engine Replication Windows
5653745 Improves security when SQL Server processes schema changes in transactional replication. SQL Server Engine Replication Windows
5653772 Improves security checks for lightweight merge replication operations. SQL Server Engine Replication Windows
5653810 Improves security validation when SQL Server processes queued replication data. SQL Server Engine Replication Windows
5653826 Improves authorization validation for SQL Server Agent job steps. SQL Server Engine Management Services Windows
5653835 Improves role validation during replication subscription checks. SQL Server Engine Replication Windows
5654329 Disables Extensible Stylesheet Language Transformations (XSLT) scripting by default in the SQL Server Integration Services XML Task. To restore the previous behavior, set EnableXsltScript to 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server{version}\SSIS\XMLTask. Integration Services Integration Services Windows
5654541 Improves security for replication data and operations. SQL Server Engine Replication All
5657243 Fixes an issue in which handling truncated OLE DB output parameters in the Integration Services Execute SQL Task can cause invalid memory access. Integration Services Integration Services Windows
5657883 Fixes an integer overflow in the Integration Services HTTP Connection Manager that can cause invalid memory access. Integration Services Integration Services Windows
5658034 Fixes an input validation issue in SQL Server VSS Writer in which an oversized user instance name can disrupt backup and snapshot operations or cause an out-of-bounds memory write action. SQL Server Engine Backup Restore Windows
5658115 Fixes a memory access violation that might occur when the Raw File source component in SQL Server Integration Services reads data. Integration Services Integration Services Windows
5660083 Fixes non-yielding scheduler errors and dump files that might occur during heavy lazy writer I/O activity. SQL Server Engine SQL OS All
5660569 Improves bounds validation when the Replication Queue Reader Agent processes queued update messages. SQL Server Engine Replication Windows
5660608 Improves input validation in the sys.sp_polybase_show_objects stored procedure. SQL Server Engine PolyBase All
5673576 Adds three stored procedures for databases in multi-database link mode with Azure SQL Managed Instance: sys.sp_milink_reseed restarts seeding without removing and re-adding the database to the availability group, sys.sp_milink_repair repairs a broken link, and sys.sp_milink_check checks database health. SQL Server Engine High Availability and Disaster Recovery All
5678408 Improves parameter validation and data conversion handling in the Replication Queue Reader Agent. SQL Server Engine Replication Windows
5693317 Fixes an issue in which ALTER DATABASE CURRENT ADD FILE fails and returns a "42019" error message on Azure SQL Managed Instance General Purpose and Next-gen General Purpose service tiers. SQL Server Engine Programmability All
5698422 Improves replication metadata validation to prevent invalid rowset binding access. SQL Server Engine Replication All
5720065 Improves security checks for replication linked-server access. SQL Server Engine Replication All
5720088 Improves input validation in Azure Synapse Link for SQL. SQL Server Engine Replication Windows
5722308 Fixes an information disclosure vulnerability in the xp_decodequeuecmd replication queue command decoder. SQL Server Engine Replication Windows
5723138 Improves error-source validation in merge replication to handle a security vulnerability. SQL Server Engine Replication Windows
5723283 Fixes a heap buffer overflow that can occur when the Log Reader Agent escapes single quotation marks in column values. SQL Server Engine Replication Windows
5731797 Fixes an elevation of privilege vulnerability in merge replication by improving validation of subscriber validation expressions. SQL Server Engine Replication Windows

How to obtain or download this or the latest cumulative update package

How to obtain or download the latest cumulative update package for Windows (recommended)

The following update is available from the Microsoft Download Center:

Download the latest cumulative update package for SQL Server 2022 now

Note

  • Microsoft Download Center always offers the latest SQL Server 2022 CU release.
  • If the download page doesn't appear, contact Microsoft Customer Service and Support to obtain the cumulative update package.
How to obtain or download this cumulative update package for Windows from Microsoft Update Catalog

The following update is available from the Microsoft Update Catalog:

Note

  • Microsoft Update Catalog contains this SQL Server 2022 CU and previously released SQL Server 2022 CU releases.
  • This CU is also available through Windows Server Update Services (WSUS).
  • We recommend that you always install the latest cumulative update that is available.
How to obtain or download the latest cumulative update package for Linux

To update SQL Server 2022 on Linux to the latest CU, you must first have the Cumulative Update repository configured. Then, update your SQL Server packages by using the appropriate platform-specific update command.

For installation instructions and direct links to the CU package downloads, see the SQL Server 2022 Release Notes.

File information

File hash information

You can verify the download by computing the hash of the SQLServer2022-KB5125472-x64.exe file through the following command:

certutil -hashfile SQLServer2022-KB5125472-x64.exe SHA256

File name SHA256 hash
SQLServer2022-KB5125472-x64.exe 0C0FDE7858B349B476D2B667F399E707A67235F1C4AEDFD68564C3534192F686
Cumulative Update package file information

Download the list of files that are included in KB5125472.

Notes for this update

Prerequisites

To apply this cumulative update package, you must be running SQL Server 2022.

Restart information

You might have to restart the computer after you apply this cumulative update package.

Registry information

To use one of the hotfixes in this package, you don't have to make any changes to the registry.

Important notices

This article also provides the following important information.

Analysis Services CU build version

Beginning in Microsoft SQL Server 2017, the Analysis Services build version number and SQL Server Database Engine build version number don't match. For more information, see Verify Analysis Services cumulative update build version.

Cumulative updates (CU)

  • Each new CU contains all the fixes that were included with the previous CU for the installed version of SQL Server.
  • SQL Server CUs are certified to the same levels as service packs, and should be installed at the same level of confidence.
  • We recommend ongoing, proactive installation of CUs as they become available according to these guidelines:
    • Historical data shows that a significant number of support cases involve an issue that has already been addressed in a released CU.
    • CUs might contain added value over and above hotfixes. This includes supportability, manageability, and reliability updates.
  • We recommend that you test SQL Server CUs before you deploy them to production environments.
Hybrid environment deployment

When you deploy an update to a hybrid environment (such as Always On, replication, cluster, and mirroring), we recommend that you refer to the following articles before you deploy the update:

Language support

SQL Server CUs are currently multilingual. Therefore, this CU package isn't specific to one language. It applies to all supported languages.

Components (features) updated

One CU package includes all available updates for all SQL Server 2022 components (features). However, the cumulative update package updates only those components that are currently installed on the SQL Server instance that you select to be serviced. If a SQL Server feature (for example, Analysis Services) is added to the instance after this CU is applied, you must reapply this CU to update the new feature to this CU.

Support for this update

If other issues occur, or if any troubleshooting is required, you might have to create a service request. The usual support costs will apply to additional support questions and to issues that don't qualify for this specific cumulative update package. For a complete list of Microsoft Customer Service and Support telephone numbers, or to create a separate service request, go to the Microsoft support website.

How to uninstall this update

How to uninstall this update on Windows
  1. In Control Panel, open the Programs and Features item, and then select View installed updates.
  2. Locate the entry that corresponds to this cumulative update package under SQL Server 2022.
  3. Press and hold (or right-click) the entry, and then select Uninstall.
How to uninstall this update on Linux

To uninstall this CU on Linux, you must roll back the package to the previous version. For more information about how to roll back the installation, see Roll back SQL Server.

References