CVE-2023-21713

CVE-2023-21713 is a Microsoft SQL Server remote code execution vulnerability. The CVE is addressed in the February 2023 security updates for SQL Server 2019/GDR (KB5021125) and related KBs, which list CVE-2023-21713 among addressed issues. The vulnerability affects SQL Server components and is mi...

CVE-2023-21713 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21686 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21686

Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...

CVE-2023-21685 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21685 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21799

Technical details about CVE-2023-21799 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-21799 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21568

CVE-2023-21568 affects the Microsoft SQL Server Integration Services Visual Studio extension. The vulnerability stems from improper input validation in the VS extension, enabling a local, user-interactive remote code execution with high impact (C/H/I/H; CVSS v3.1: 7.3). Exploitation details or a ...

CVE-2023-21568 Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

CVE-2023-21718 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21718

Technical details for CVE-2023-21718 are not provided in the supplied documents; no specific affected products, versions, impact, or fixes are listed here. Monitor for updates.

CVE-2023-21705 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21705

CVE-2023-21705 is a Microsoft SQL Server remote code execution vulnerability. Public documents indicate the issue is addressed in security updates for SQL Server 2019 GDR (KB5021125) which fixes multiple CVEs including CVE-2023-21705; the update targets SQL Server 2019 and brings the product to b...

CVE-2023-21704

CVE-2023-21704 is a vulnerability in the Microsoft ODBC Driver for SQL Server that enables remote code execution. Microsoft’s security update KB5021126 addresses CVE-2023-21704 as part of a CU/patch bundle, updating the ODBC driver component used by SQL Server connectivity. The documented impact ...

CVE-2023-21704 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21528 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2023-21528

CVE-2023-21528 is a Microsoft SQL Server Remote Code Execution vulnerability. In SQL Server 2008 R2 SP3 GDR, updates described in KB5021112 fix CVE-2023-21528 (builds including SQLServer2008R2-KB5021112-x64.exe, version 10.50.6785.2). In SQL Server 2019, fixes are included in KB5021125 (build: SQ...

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...