CVE-2024-21308 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21317 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21308

CVE-2024-21308 affects the SQL Server Native Client OLE DB Provider. The vulnerability enables remote code execution when a vulnerable client communicates with a server presenting malicious data (attack vector: NETWORK; user interaction required). Microsoft released fixes in the July 9, 2024 secu...

CVE-2024-21317

CVE-2024-21317 affects the SQL Server Native Client OLE DB Provider and is an active SQL Server Client vulnerability that enables remote code execution via the OLE DB driver. The CVE is listed among multiple SQL Server RC vulnerabilities, with a CVSSv3 base score of 8.8 (Network attack, no privil...

CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21303

CVE-2024-21303 is a SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. The issue affects the OLE DB Provider component used by SQL Server clients, with a remote attacker able to trigger code execution by supplying malicious data during client-server interaction. The vul...

CVE-2024-20701

CVE-2024-20701 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Publicly documented impact states that exploitation leads to arbitrary code execution on the client/server context when connecting to SQL Server. The issue is among a set of SQL Server vulnerabilitie...

CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35272

CVE-2024-35272 is a SQL Server Native Client OLE DB Provider remote code execution vulnerability. The NCSC advisory and Microsoft KB update confirm the issue affects Windows SQL Server components and was fixed by July 9, 2024 security updates (KB5040944). The vulnerability allows code execution i...

CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271

CVE-2024-35271 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVSS v3.1 score in the initial records is 8.8 (HIGH), with network attack vector, no privileges required, but user interaction needed, and impact on confidentiality, integrity, and availab...

CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37331

CVE-2024-37331 — SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. The connected documents identify this CVE as affecting the SQL Server Native Client OLE DB Provider and note it is addressed by the July 2024 Microsoft SQL Server security update (KB5040944), which list...

CVE-2024-37318

CVE-2024-37318 is a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVSSv3.1 base score is 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: NONE; User interaction: REQUIRED; Impact on confidentiality, integrity, and availabi...