KB5068402

KB5068402 - Description of the security update for SQL Server 2017 CU31: November 11, 2025

Applies To

SQL Server 2017 on LinuxSQL Server 2017 on Windows

Release Date:

11/11/2025

Version:

14.0.3515.1

• Summary

• Improvements and fixes included in this update

• How to obtain and install the update

• More information

• File information

• Information about protection and security

Summary

This security update contains fixes and resolves vulnerabilities. To learn more about the vulnerabilities, see the following security advisories:

• CVE-2025-59499 - Microsoft SQL Server Elevation of Privilege Vulnerability

The Microsoft SQL Server components are updated to the following builds in this security update:

• SQL Server - product version: 14.0.3515.1, file version: 2017.140.3515.1

Improvements and fixes included in this update

A downloadable Microsoft Excel workbook that contains a summary list of builds, together with their current support lifecycle, is available. The Excel file also contains detailed fix lists. Download this Excel file now.

Note: Individual entries in the following table can be referenced directly through a bookmark. If you select any bug reference ID in the table, a bookmark tag is added to the URL by using the "#bkmk_NNNNNNN" format. You can then share this URL with others so that they can jump directly to the desired fix in the table.

| Bug reference | Description | Fix area | Component | Platform | | --- | --- | --- | --- | --- | | 4653617 | This update resolves an issue in SQL Server Analysis Services where Row-Level Security (RLS) filters could be skipped when combined with Object-Level Security (OLS) and Column-Level Security (CLS) in certain multi-role configurations. This only occurs under rare and...