Advisories · Technology

Microsoft SQL Server 2017 (CU 31).

Every CVE that names Microsoft SQL Server 2017 (CU 31) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49758 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 12 Aug 2025
CVE-2025-49719 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2016 for Service Pack 2 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-20
Not analysed yet 8 Jul 2025
CVE-2024-49021 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49018 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- CWE-197
Not analysed yet 12 Nov 2024
CVE-2024-49017 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49016 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49015 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49014 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49013 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49012 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49011 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49010 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49009 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49008 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49006 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49007 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49005 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49004 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49003 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49002 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49001 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49000 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48999 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48998 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48997 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48993 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49043 CVE record

CVSS 7.8 High

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- CWE-426
Not analysed yet 12 Nov 2024
CVE-2024-48996 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48995 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-48994 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43462 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 29)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43459 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-38255 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-37980 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-37341 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-37965 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43474 CVE record

CVSS 7.6 High

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-170
Not analysed yet 10 Sept 2024
CVE-2024-26191 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-26186 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37342 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37337 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-197
Not analysed yet 10 Sept 2024
CVE-2024-37339 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37340 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37335 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37966 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37338 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-35256 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-28928 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37336 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37333 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37330 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37329 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37328 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37327 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37326 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21449 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37324 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 13)
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37323 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37322 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37321 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024