CVE-2024-37965

CVE-2024-37965 is a Microsoft SQL Server Elevation of Privilege vulnerability. Exploitation requires authentication and could grant elevated privileges within SQL Server. Public details are supported by Nessus/NVD/NCSC entries and the Microsoft update KB5042215 (SQL Server CU31, Sept 10 2024) whi...

CVE-2024-43474 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2024-43474 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2024-43474

CVE-2024-43474 is a Microsoft SQL Server information-disclosure vulnerability. Connected sources confirm an authenticated remote access risk that could disclose sensitive database and file information. Security updates exist for multiple SQL Server branches: KB5042217 (SQL Server 2017 GDR), KB504...

EUVD-2024-40741

Microsoft SQL Server Information Disclosure Vulnerability...

CVE-2024-26191 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

EUVD-2024-23462

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

EUVD-2024-23467

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-26191

CVE-2024-26191 is a remote code execution vulnerability in Microsoft SQL Server Native Scoring. Exploitation could allow an attacker to execute arbitrary code by sending crafted input over the network, with no user interaction and required/low privileges. Public documents confirm this CVE is addr...

CVE-2024-26191 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37337 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37342

CVE-2024-37342 is a Microsoft SQL Server information-disclosure vulnerability in the SQL Server Native Scoring/Machine Learning components. Public details across connected documents confirm: affected software includes SQL Server 2017 (GDR) and SQL Server 2022 CU14 builds; the issue is tracked as ...

CVE-2024-37337 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37342 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37342 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37337

CVE-2024-37337 corresponds to a Microsoft SQL Server Native Scoring Information Disclosure vulnerability. Public references in connected documents confirm information disclosure as the impact vector, with exploitation likely via SQL Server components, and remediation via Sept 2024 security update...

CVE-2024-37339 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37339

CVE-2024-37339 corresponds to a remote code execution vulnerability in Microsoft SQL Server Native Scoring (Machine Learning Services). The flaw allows an attacker to execute arbitrary code on the vulnerable system. The base metrics show: AV:N, AC:L, PR:L, UI:N, S:U, C/H/I/A: H, with a base score...