# Microsoft SQL Server 2017 (CU 31).

Every CVE that names Microsoft SQL Server 2017 (CU 31) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49758.md)
  `CVE-2025-49758` · CVE record: Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Privilege escalation
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-49719.md)
  `CVE-2025-49719` · CVE record: Microsoft Microsoft SQL Server 2016 for Service Pack 2 (GDR) and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-20
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49021.md)
  `CVE-2024-49021` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49018.md)
  `CVE-2024-49018` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-197
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49017.md)
  `CVE-2024-49017` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49016.md)
  `CVE-2024-49016` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49015.md)
  `CVE-2024-49015` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 29) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49014.md)
  `CVE-2024-49014` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49013.md)
  `CVE-2024-49013` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49012.md)
  `CVE-2024-49012` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49011.md)
  `CVE-2024-49011` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49010.md)
  `CVE-2024-49010` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49009.md)
  `CVE-2024-49009` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49008.md)
  `CVE-2024-49008` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49006.md)
  `CVE-2024-49006` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49007.md)
  `CVE-2024-49007` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49005.md)
  `CVE-2024-49005` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49004.md)
  `CVE-2024-49004` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49003.md)
  `CVE-2024-49003` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 29) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49002.md)
  `CVE-2024-49002` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49001.md)
  `CVE-2024-49001` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 29) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49000.md)
  `CVE-2024-49000` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48999.md)
  `CVE-2024-48999` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48998.md)
  `CVE-2024-48998` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48997.md)
  `CVE-2024-48997` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48993.md)
  `CVE-2024-48993` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49043.md)
  `CVE-2024-49043` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-426
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48996.md)
  `CVE-2024-48996` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48995.md)
  `CVE-2024-48995` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-48994.md)
  `CVE-2024-48994` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43462.md)
  `CVE-2024-43462` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 29) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43459.md)
  `CVE-2024-43459` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38255.md)
  `CVE-2024-38255` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-37980.md)
  `CVE-2024-37980` · CVE record: Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Privilege escalation
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-37341.md)
  `CVE-2024-37341` · CVE record: Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Broken access control
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-37965.md)
  `CVE-2024-37965` · CVE record: Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-20
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-43474.md)
  `CVE-2024-43474` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 2 more · CVSS 7.6 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-170
- [Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26191.md)
  `CVE-2024-26191` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26186.md)
  `CVE-2024-26186` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-37342.md)
  `CVE-2024-37342` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-37337.md)
  `CVE-2024-37337` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-197
- [Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37339.md)
  `CVE-2024-37339` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37340.md)
  `CVE-2024-37340` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37335.md)
  `CVE-2024-37335` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-37966.md)
  `CVE-2024-37966` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37338.md)
  `CVE-2024-37338` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-35256.md)
  `CVE-2024-35256` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-28928.md)
  `CVE-2024-28928` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37336.md)
  `CVE-2024-37336` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37333.md)
  `CVE-2024-37333` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37330.md)
  `CVE-2024-37330` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37329.md)
  `CVE-2024-37329` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37328.md)
  `CVE-2024-37328` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37327.md)
  `CVE-2024-37327` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37326.md)
  `CVE-2024-37326` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21449.md)
  `CVE-2024-21449` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37324.md)
  `CVE-2024-37324` · CVE record: Microsoft Microsoft SQL Server 2022 for (CU 13) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37323.md)
  `CVE-2024-37323` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37322.md)
  `CVE-2024-37322` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption
- [SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-37321.md)
  `CVE-2024-37321` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-sql-server-2017-cu-31.md>
Older: <https://agentprime.io/advisories/technology/microsoft-sql-server-2017-cu-31.md?cursor=WyIyMDI0LTA3LTA5VDE3OjAyOjQ5Ljc3ODAwMFoiLCJDVkUtMjAyNC0zNzMyMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-sql-server-2017-cu-31&cursor=WyIyMDI1LTA4LTEyVDE3OjA5OjQzLjY4ODAwMFoiLCJDVkUtMjAyNS01MzcyNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-sql-server-2017-cu-31/?cursor=WyIyMDI1LTA4LTEyVDE3OjA5OjQzLjY4ODAwMFoiLCJDVkUtMjAyNS01MzcyNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.