CVE-2024-28928 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35256 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35256

CVE-2024-35256 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The issue affects the client driver component used to connect to SQL Server and enables arbitrary code execution if a vulnerable driver is used. The advisory data shows this CVE is included in...

CVE-2024-28928 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-28928

CVE-2024-28928 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Affected component: SQL Server Native Client OLE DB Provider (client/server interaction). Root cause: flaw in the OLE DB Provider enabling arbitrary code execution. Impact: remote code execution with...

CVE-2024-35256 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37336 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37336

CVE-2024-37336 affects SQL Server Native Client OLE DB Provider. It is a remote code execution vulnerability in the OLE DB client used by SQL Server, with base score 8.8 (HIGH). Microsoft released a security update (July 2024) to fix this and related CVEs; the update package for SQL Server 2016 S...

CVE-2024-37336 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37333

CVE-2024-37333 is a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider. It is rated CVSSv3.1 8.8 (High) with network attack vector, low attack complexity, no privileges required, but user interaction is required. The connected sources indicate this entry is part o...

CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2024-37334

CVE-2024-37334 refers to the Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Connected sources confirm an RCE flaw in the OLE DB Driver when a vulnerable client connects to a malicious SQL Server, with the issue arising from a missing security update. The Nessus plugin...

CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37330

CVE-2024-37330 affects the SQL Server Native Client OLE DB Provider and is described as a Remote Code Execution vulnerability with CVSSv3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8. Connected sources confirm the issue is part of SQL Server OLE DB client/provider components and that th...

CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329

CVE-2024-37329 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The initial documents identify the affected component as the OLE DB Provider used by SQL Server clients, with the root cause described as a remote code execution path when interacting with the...