CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35272

CVE-2024-35272 is a SQL Server Native Client OLE DB Provider remote code execution vulnerability. The NCSC advisory and Microsoft KB update confirm the issue affects Windows SQL Server components and was fixed by July 9, 2024 security updates (KB5040944). The vulnerability allows code execution i...

CVE-2024-35271

CVE-2024-35271 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVSS v3.1 score in the initial records is 8.8 (HIGH), with network attack vector, no privileges required, but user interaction needed, and impact on confidentiality, integrity, and availab...

CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37331

CVE-2024-37331 — SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability. The connected documents identify this CVE as affecting the SQL Server Native Client OLE DB Provider and note it is addressed by the July 2024 Microsoft SQL Server security update (KB5040944), which list...

CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37318 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37332

CVE-2024-37332 is a Remote Code Execution vulnerability affecting the SQL Server Native Client OLE DB Provider. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (HIGH). Connected documents confirm the CVE is part of a broader set of SQL Server NCDP vulnerabilit...

CVE-2024-37318

CVE-2024-37318 is a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVSSv3.1 base score is 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: NONE; User interaction: REQUIRED; Impact on confidentiality, integrity, and availabi...

CVE-2024-37332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37318 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21428 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21428

CVE-2024-21428 is a remote code execution vulnerability affecting the SQL Server Native Client OLE DB Provider. The available documents consistently describe it as an RCE issue tied to the Native Client OLE DB Provider in SQL Server. The Nessus entries enumerate this CVE as part of a broader set ...