CVE-2024-26191: Heap-based Buffer Overflow

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-26186: Use After Free

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

PT-2024-6236

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The issue is related to an insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to elevate...

PT-2024-6356

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, which is vulnerable due to a dereference of an untrusted pointer. This could...

PT-2024-6355

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in dynamic memory. Exploitation of this issue may allow a remote attacke...

PT-2024-6354

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in dynamic memory. Exploitation of this issue may allow a remote attacke...

PT-2024-6287 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to a buffer overflow in the OLE DB driver for SQL Server on Windows operating systems. This can allow a remote attacker to disclose protected information o...

PT-2024-6360 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, and involves a problem with dereferencing an untrusted pointer. This could...

PT-2024-6358 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code...

PT-2024-6359 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to errors in numerical truncation in the Microsoft SQL Server system, which can allow a remote attacker to gain unauthorized access to protected informatio...

PT-2024-6357 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server versions prior to 13.0.7045.2 Microsoft SQL Server versions prior to 13.0.6450.1 Microsoft SQL Server versions prior to 15.0.4395.2 Microsoft SQL Server versions prior to 15.0.2125.1 Microsoft SQL Server versions prior to...

PT-2024-6286 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to potentially elevate their privileges. It is associated with the OLE DB driver for SQL Server ...

PT-2024-6285 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft SQL Server, associated with unsafe privilege management. Exploitation of this issue may allow a...

Microsoft SQL Server Access Control Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

Microsoft SQL Server security vulnerabilities

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrar...

Microsoft SQL Server security vulnerabilities

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

Microsoft SQL Server resource management error vulnerabilities

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A resource management error vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products a...

Microsoft SQL Server security vulnerabilities

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

Microsoft SQL Server buffer error vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A buffer error vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could gain access to sensitive information. The following products...

Microsoft SQL Server security vulnerabilities

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Microsoft SQL Server, which can be exploited by attackers to obtain sensitive...