CVE-2024-37339

CVE-2024-37339 corresponds to a remote code execution vulnerability in Microsoft SQL Server Native Scoring (Machine Learning Services). The flaw allows an attacker to execute arbitrary code on the vulnerable system. The base metrics show: AV:N, AC:L, PR:L, UI:N, S:U, C/H/I/A: H, with a base score...

EUVD-2024-36940

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37335 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

EUVD-2024-36941

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37340

CVE-2024-37340 is a Microsoft SQL Server Native Scoring remote code execution vulnerability. Connected sources confirm affected component scope relates to SQL Server with Machine Learning/Native Scoring functionality and indicate a fix was released in the September 2024 updates. Microsoft’s KB504...

CVE-2024-37335 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37340 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37340 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37335

CVE-2024-37335 corresponds to a remote code execution vulnerability in the Microsoft SQL Server Native Scoring component. Public documentation confirms this CVE is part of a family of SQL Server Native Scoring vulnerabilities that allow an attacker who can reach the SQL Server over the network to...

CVE-2024-37966 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37966 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...

CVE-2024-37966

CVE-2024-37966 is a Microsoft SQL Server Native Scoring information disclosure vulnerability. Public docs identify it as an information disclosure issue in the SQL Server Native Scoring component, with the vulnerability enabling an attacker to access sensitive data. The connected update reference...

EUVD-2024-37037

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37338

CVE-2024-37338 is a remote code execution vulnerability in Microsoft SQL Server (Machine Learning/Native Scoring components) that can be exploited over the network without user interaction. The CVSS v3.1 base score is 8.8 (HIGH) with RCE, requiring LOW privileges and network access; impact is hig...

CVE-2024-37338 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-37338 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

Microsoft SQL Server Elevation of Privilege Vulnerability

...

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...