CVE-2024-37333

CVE-2024-37333 is a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider. It is rated CVSSv3.1 8.8 (High) with network attack vector, low attack complexity, no privileges required, but user interaction is required. The connected sources indicate this entry is part o...

CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37330

CVE-2024-37330 affects the SQL Server Native Client OLE DB Provider and is described as a Remote Code Execution vulnerability with CVSSv3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8. Connected sources confirm the issue is part of SQL Server OLE DB client/provider components and that th...

CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329

CVE-2024-37329 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The initial documents identify the affected component as the OLE DB Provider used by SQL Server clients, with the root cause described as a remote code execution path when interacting with the...

CVE-2024-37327 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37327

CVE-2024-37327 is a vulnerability in the SQL Server Native Client OLE DB Provider that enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low attack complexity, no privileges required, but user interaction is required. Technical details in connected d...

CVE-2024-37328

CVE-2024-37328 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. CVSSv3.1 base score 8.8 (HIGH) with Network attack vector and user interaction required, implying exploitation via a crafted data response when the client driver is used to connect to a SQL Se...

CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37327 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449

CVE-2024-21449 is a vulnerability in the Microsoft SQL Server Native Client OLE DB Provider that enables remote code execution. Affected component: SQL Server Native Client OLE DB Provider (client/driver) used by SQL Server and clients. Root cause: improper handling of data returned by the provid...

CVE-2024-37326

CVE-2024-37326 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The impact is high (CVSS v3.1: 8.8, Confidentiality/Integrity/Availability: High) with network attack vector, no privileges required, but user interaction is required. Affected component is the SQL S...