Advisories · Technology

Microsoft SQL Server 2019 (CU 18).

Every CVE that names Microsoft SQL Server 2019 (CU 18) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-23384 CVE record

CVSS 7.3 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21713 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21718 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21705 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Hard-coded credentials
Not analysed yet 14 Feb 2023
CVE-2023-21704 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2014 Service Pack 3 (CU 4)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21528 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 14 Feb 2023