Advisories · Technology

Microsoft SQL Server 2019 (GDR).

Every CVE that names Microsoft SQL Server 2019 (GDR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-38255 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-37980 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-37341 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-37965 CVE record

CVSS 8.8 High

Microsoft SQL Server Elevation of Privilege Vulnerability
- Microsoft SQL Server 2016 Service Pack 3 (GDR)
- Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43474 CVE record

CVSS 7.6 High

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-170
Not analysed yet 10 Sept 2024
CVE-2024-26191 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-26186 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37342 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37337 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-197
Not analysed yet 10 Sept 2024
CVE-2024-37339 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37340 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37335 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37966 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-37338 CVE record

CVSS 8.8 High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-35256 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-28928 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37336 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37333 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37334 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37330 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37329 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37328 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37327 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37326 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21449 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37324 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 13)
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37323 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37322 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37321 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37320 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37319 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21425 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Microsoft SQL Server 2022 for (CU 13)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21331 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21317 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21308 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21303 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 13)
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-20701 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-35272 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-35271 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37331 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37332 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37318 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Microsoft SQL Server 2022 for (CU 13)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21428 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21415 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21414 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21398 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21373 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21335 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21333 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21332 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38087 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38088 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-29985 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29984 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29983 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29982 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29048 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29046 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft OLE DB Driver 19 for SQL Server
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29044 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (CU 25)
- Microsoft SQL Server 2022 for (CU 12)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28944 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- CWE-197
Not analysed yet 9 Apr 2024