Download Security Update for SQL Server 2016 SP1 CU (KB4293808) from Official Microsoft Download Center

• Executing a specially crafted query involving calculating difference between values of different date types and aggregation of the results, could lead to stack corruption, if the query runs in batch mode. Depending on particular values processed by such query, this could lead to terminating the SQL Server process, or a possibility of remote code execution. More information about the vulnerability can be found here: SQL Server 2016 SP1 CU
  
  For other impacted SQL Server releases, please see:
  
  Security Update for SQL Server 2016 SP1 CU(CU10+GDR)*
  Security Update for SQL Server 2016 SP1 GDR
  Security Update for SQL Server 2016 SP2 CU (CU2+GDR)*
  Security Update for SQL Server 2016 SP2 GDR
  Security Update for SQL Server 2017 RTM CU (CU9+GDR)*
  Security Update for SQL Server 2017 RTM GDR
  * These security updates are for SQL Server instances that have applied a Cumulative Update.
  
  For a complete listing of the issues resolved in this update, see the associated Microsoft Knowledge Base article.

Windows 10 , Windows 8, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016

• This update is applicable to SQL Server 2016 SP1 CU instances installed on supported Windows Operating System.