Security Update for SQL Server 2012 SP4 GDR (KB4583465)

Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled.

More information about the vulnerability can be found here: KB4583465

For other impacted SQL Server releases, please see:

Security Update for SQL Server 2012 SP4 GDR
Security Update for SQL Server 2014 SP3 CU (CU4+GDR fix)*
Security Update for SQL Server 2014 SP3 GDR
Security Update for SQL Server 2016 SP2 CU (CU15+GDR fix)*
Security Update for SQL Server 2016 SP2 GDR
Security Update for SQL Server 2017 RTM CU (CU22+GDR fix)*
Security Update for SQL Server 2017 RTM GDR
Security Update for SQL Server 2019 RTM CU (CU8+GDR fix)*
Security Update for SQL Server 2019 RTM GDR
* These security updates are for SQL Server instances that have applied a Cumulative Update.

For a complete listing of the issues resolved in this update, see the associated Microsoft Knowledge Base article.

Supported Operating Systems

Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 8.1, Windows Server 2003, Windows 7, Windows Vista, Windows XP

This update is applicable to SQL Server 2012 SP4 instances installed on supported Windows operating systems.

Download the appropriate file for your computer's processor by clicking one of the links below. You can run the package directly from the link or save it on your local disk to install at a later time.