Advisories · Technology

Microsoft SQL Server 2019 (CU 28).

Every CVE that names Microsoft SQL Server 2019 (CU 28) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-37980 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-37341 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-37965 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-26191 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-26186 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37342 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37337 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-197
Not analysed yet 10 Sept 2024
CVE-2024-37339 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37340 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37335 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37966 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37338 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024