CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37326 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37326

CVE-2024-37326 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The impact is high (CVSS v3.1: 8.8, Confidentiality/Integrity/Availability: High) with network attack vector, no privileges required, but user interaction is required. Affected component is the SQL S...

CVE-2024-37326 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449

CVE-2024-21449 is a vulnerability in the Microsoft SQL Server Native Client OLE DB Provider that enables remote code execution. Affected component: SQL Server Native Client OLE DB Provider (client/driver) used by SQL Server and clients. Root cause: improper handling of data returned by the provid...

CVE-2024-37324 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37324

CVE-2024-37324 is a vulnerability in the SQL Server Native Client OLE DB Provider that enables remote code execution. The reliable sources in the provided documents confirm the affected component as the SQL Server Native Client OLE DB Provider and indicate an RCE impact. Microsoft has released up...

CVE-2024-37324 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37322 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37323 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37323

CVE-2024-37323 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability affecting SQL Server Native Client/OLE DB Provider usage. The CVSSv3.1 base score is 8.8 (HIGH); attack vector NETWORK, attack complexity LOW, privileges required NONE, user interaction REQUIRED, and ...

CVE-2024-37322

CVE-2024-37322 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. Affected component: SQL Server Native Client OLE DB Provider used by clients to connect to SQL Server. Underlying issue: remote code execution with network access (CVSSv3.1: AV:N/AC:L/PR:N/UI:...

CVE-2024-37323 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37322 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37321 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37320 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37321

CVE-2024-37321 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The connected data confirms affected component is the SQL Server Native Client OLE DB Provider and root cause is remote code execution via that provider. The CVSSv3.1 base score is 8.8 (HIGH), with a...

CVE-2024-37320

CVE-2024-37320 affects the SQL Server Native Client OLE DB Provider and enables remote code execution via the OLE DB client library. The vulnerability is network-facing with low attack complexity and requires user interaction, with high impact on confidentiality, integrity, and availability (CVSS...