Advisories · Technology

Microsoft SQL Server 2019 (GDR).

Every CVE that names Microsoft SQL Server 2019 (GDR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-28943 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28941 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28940 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28938 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28937 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28935 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28934 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28933 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.9
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28930 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28927 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28926 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29045 CVE record

CVSS 7.5 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29043 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28945 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28942 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28939 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Information disclosure
Not analysed yet 9 Apr 2024
CVE-2024-28936 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28932 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28931 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28929 CVE record

CVSS 8.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28915 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28914 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28913 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28912 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28911 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28910 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28909 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28908 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28906 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 12)
- Microsoft SQL Server 2019 (CU 25)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2023-36785 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36417 CVE record

CVSS 7.8 High

Microsoft SQL OLE DB Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36420 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36728 CVE record

CVSS 5.5 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2019 (CU 22)
- Microsoft SQL Server 2022 (CU 8)
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36730 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-23384 CVE record

CVSS 7.3 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21713 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21718 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21705 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Hard-coded credentials
Not analysed yet 14 Feb 2023
CVE-2023-21704 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2014 Service Pack 3 (CU 4)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21528 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2022-29143 CVE record

CVSS 7.5 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
Not analysed yet 15 Jun 2022
CVE-2021-1636 CVE record

CVSS 8.8 High

Microsoft SQL Elevation of Privilege Vulnerability
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- SQL injection
Not analysed yet 12 Jan 2021