CVE-2024-21435 Windows OLE Remote Code Execution Vulnerability

...

CVE-2024-21435 Windows OLE Remote Code Execution Vulnerability

...

CVE-2024-21435

CVE-2024-21435 – Windows OLE Remote Code Execution is discussed in the connected Krebs analysis as being exploitable by tricking a user into opening a document, which then causes the OLE engine to download a malicious DLL and execute code. The entry lists an 8.8 CVSS (HIGH) with NETWORK attack ve...

CVE-2024-26161

CVE-2024-26161 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and NONE privileges required, but user interaction is REQ...

CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-21450 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-21450 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-21444 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-21444

CVE-2024-21444 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a remote code execution vulnerability. The NVD entry assigns CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH). Exploitation is network-based, requires user interaction, and impa...

CVE-2024-21444 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-21441

CVE-2024-21441 affects the Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The NVD entry rates it High (CVSS 3.1: 8.8) with NETWORK vector, LOW attack complexity, NONE privileges, and user interaction required; impacts on confidentiality, integrity, and...

CVE-2024-21441 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

Windows OLE Remote Code Execution Vulnerability

...

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

Microsoft OLE DB Provider for SQL Server Security Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

KB5035853: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (March 2024)

The remote Windows host is missing security update 5035853. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...

KB5035919: Windows Server 2008 R2 Security Update (March 2024)

The remote Windows host is missing security update 5035919. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...