Unsupported Software Findernotice of vendor support
Software

Microsoft SQL Server end of life dates

The support dates the endoflife.date record (community-maintained) holds for Microsoft SQL Server, read on 30 Sep 2026: when security support ends for each version (cycle), when active support ends, and extended support where the record shows it. Below them, what Cyber Essentials, the Essential Eight, CIS Controls v8, PCI DSS and NIST SP 800-53 ask of a version past its end.

Oldest version still in support
14.0 (2017), security support to 12 Oct 2027
Next end date
14.0, security support ends 12 Oct 2027
Vendor's own notice
the vendor lifecycle policy for Microsoft SQL Server: https://learn.microsoft.com/lifecycle/products/?terms=SQL%20Server (shown, not linked: the site refused our automated check; open it in your browser); the vendor notice is authoritative
Record
Microsoft SQL Server
Kind
database
Versions in the record
36
Versions past vendor support
32
Essential Eight class
an application outside the priority classes: Patch applications asks for its removal once no longer supported at ML3; at ML1 and ML2 no held Essential Eight clause turns on it.
Source
endoflife.date/mssqlserver, community-maintained, MIT licence, read 30 Sep 2026; sources

Microsoft SQL Server versions and their support dates

as at 30 Sep 2026
CycleReleasedActive support endsSecurity support endsExtended support endsOn the read dateVendor notice
17.0 202518 Nov 20256 Jan 20316 Jan 2036none in the recordsupportedaddress held, not linked
16.0 202216 Nov 202211 Jan 202811 Jan 2033none in the recordsupportedaddress held, not linked
13.0-sp3-acp 2016 SP3 Azure Connect Pack19 May 202214 Jul 202614 Jul 202617 Jul 2029extended support onlyaddress held, not linked
13.0-sp3 2016 SP315 Sep 202114 Jul 202614 Jul 202617 Jul 2029extended support onlyaddress held, not linked
15.0 20194 Nov 201928 Feb 20258 Jan 2030none in the recordsecurity fixes onlyaddress held, not linked
12.0-sp3 2014 SP330 Oct 20189 Jul 20199 Jul 202412 Jul 2027extended support onlyaddress held, not linked
13.0-sp2 2016 SP224 Apr 201811 Oct 202211 Oct 2022none in the recordpast vendor supportaddress held, not linked
11.0-sp4 2012 SP45 Oct 201712 Jul 202212 Jul 20228 Jul 2025past vendor supportaddress held, not linked
14.0 201729 Sep 201711 Oct 202212 Oct 2027none in the recordsecurity fixes onlyaddress held, not linked
13.0-sp1 2016 SP116 Nov 20169 Jul 20199 Jul 2019none in the recordpast vendor supportaddress held, not linked
12.0-sp2 2014 SP214 Jul 201614 Jan 202014 Jan 2020none in the recordpast vendor supportaddress held, not linked
13.0 20161 Jun 20169 Jan 20189 Jan 2018none in the recordpast vendor supportaddress held, not linked
11.0-sp3 2012 SP31 Dec 20159 Oct 20189 Oct 2018none in the recordpast vendor supportaddress held, not linked
12.0-sp1 2014 SP114 Apr 201510 Oct 201710 Oct 2017none in the recordpast vendor supportaddress held, not linked
10.50-sp3 2008 R2 SP37 Jul 20148 Jul 20149 Jul 201912 Jul 2022past vendor supportaddress held, not linked
10.0-sp4 2008 SP47 Jul 20148 Jul 20149 Jul 201912 Jul 2022past vendor supportaddress held, not linked
11.0-sp2 2012 SP210 Jun 201410 Jan 201710 Jan 2017none in the recordpast vendor supportaddress held, not linked
12.0 20145 Jun 201412 Jul 201612 Jul 2016none in the recordpast vendor supportaddress held, not linked
11.0-sp1 2012 SP17 Nov 201214 Jul 201514 Jul 2015none in the recordpast vendor supportaddress held, not linked
10.50-sp2 2008 R2 SP226 Jul 201213 Oct 201513 Oct 2015none in the recordpast vendor supportaddress held, not linked
11.0 201220 May 201214 Jan 201414 Jan 2014none in the recordpast vendor supportaddress held, not linked
10.00-sp3 2008 SP36 Oct 201113 Oct 201513 Oct 2015none in the recordpast vendor supportaddress held, not linked
10.50-sp1 2008 R2 SP112 Jul 20118 Oct 20138 Oct 2013none in the recordpast vendor supportaddress held, not linked
9.0-sp4 2005 SP413 Dec 201012 Apr 201112 Apr 2016none in the recordpast vendor supportaddress held, not linked
10.00-sp2 2008 SP224 Sep 20109 Oct 20129 Oct 2012none in the recordpast vendor supportaddress held, not linked
10.50-r2 2008 R220 Jul 201010 Jul 201210 Jul 2012none in the recordpast vendor supportaddress held, not linked
10.00-sp1 2008 SP131 Mar 200911 Oct 201111 Oct 2011none in the recordpast vendor supportaddress held, not linked
9.00-sp3 2005 SP315 Dec 200810 Jan 201210 Jan 2012none in the recordpast vendor supportaddress held, not linked
10.00 20086 Nov 200813 Apr 201013 Apr 2010none in the recordpast vendor supportaddress held, not linked
9.00-sp2 2005 SP219 Feb 200712 Jan 201012 Jan 2010none in the recordpast vendor supportaddress held, not linked
9.0-sp1 2005 SP118 Apr 20068 Apr 20088 Apr 2008none in the recordpast vendor supportaddress held, not linked
9.0 200514 Jan 200610 Jul 200710 Jul 2007none in the recordpast vendor supportaddress held, not linked
8.0-sp4 2000 SP46 May 20058 Apr 20089 Apr 2013none in the recordpast vendor supportaddress held, not linked
7.0-sp4 7.0 SP426 Apr 200231 Dec 200511 Jan 2011none in the recordpast vendor supportaddress held, not linked
6.50-sp5a 6.5 SP5a24 Dec 19981 Jan 20021 Jan 2002none in the recordpast vendor supportaddress held, not linked
6.0-sp3 6.0 SP313 Jun 199531 Mar 199931 Mar 1999none in the recordpast vendor supportaddress held, not linked

A version this table does not list is not in the record: the finder reads it as unknown, never supported. The dates are the record's own; nothing here states a date the record does not hold.

What the schemes ask of a version past its end

Cyber Essentials
software on in-scope devices licensed and supported by the vendor, meaning it still receives security updates; unsupported software removed or segregated (SU.1, SU.4). Cyber Essentials Plus: removed, or isolated with compensating controls (PM-02).
Essential Eight
An application outside the priority classes: Patch applications asks for its removal once no longer supported at ML3; at ML1 and ML2 no held Essential Eight clause turns on it.
CIS Controls v8, Safeguard 2.2
only software that still receives vendor support may be marked authorised; unsupported software kept for the mission needs a recorded exception with compensating controls and the acceptance of the remaining risk; support status checked at least monthly.
PCI DSS 12.3.4
hardware and software reviewed at least every 12 months: that vendors still supply timely security fixes, end-of-life announcements documented, and a remediation plan for outdated technology approved by senior management.
NIST SP 800-53 SA-22
system components replaced when support is no longer available from the developer, vendor or manufacturer, or alternative sources of continued support provided.

See the specimen list runCheck your own list