EUVD-2024-36963

Microsoft SQL Server Elevation of Privilege Vulnerability...

CVE-2024-37341

CVE-2024-37341 is a Microsoft SQL Server Elevation of Privilege vulnerability. Connected docs confirm the issue affects SQL Server components and was patched via KB5046062 (security update for SQL Server 2016 SP3 Azure Connect Feature Pack). The update lists SQL Server builds such as SQLServer201...

CVE-2024-37965 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2024-37965

CVE-2024-37965 is a Microsoft SQL Server Elevation of Privilege vulnerability. Exploitation requires authentication and could grant elevated privileges within SQL Server. Public details are supported by Nessus/NVD/NCSC entries and the Microsoft update KB5042215 (SQL Server CU31, Sept 10 2024) whi...

CVE-2024-37965 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2024-43474 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2024-43474

CVE-2024-43474 is a Microsoft SQL Server information-disclosure vulnerability. Connected sources confirm an authenticated remote access risk that could disclose sensitive database and file information. Security updates exist for multiple SQL Server branches: KB5042217 (SQL Server 2017 GDR), KB504...

EUVD-2024-40741

Microsoft SQL Server Information Disclosure Vulnerability...

CVE-2024-43474 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2024-26186

CVE-2024-26186 is a Microsoft SQL Server Native Scoring remote code execution vulnerability. The Nessus/NVD data show exploitation requires network access with low attack complexity and low privileges, yielding high impact (C/H/I/A) per CVSS v3.1 (8.8, HIGH). Connected updates indicate affected p...

CVE-2024-26191 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-26191 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

EUVD-2024-23467

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

CVE-2024-26191

CVE-2024-26191 is a remote code execution vulnerability in Microsoft SQL Server Native Scoring. Exploitation could allow an attacker to execute arbitrary code by sending crafted input over the network, with no user interaction and required/low privileges. Public documents confirm this CVE is addr...

CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

...

EUVD-2024-23462

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

CVE-2024-37342

CVE-2024-37342 is a Microsoft SQL Server information-disclosure vulnerability in the SQL Server Native Scoring/Machine Learning components. Public details across connected documents confirm: affected software includes SQL Server 2017 (GDR) and SQL Server 2022 CU14 builds; the issue is tracked as ...

CVE-2024-37337

CVE-2024-37337 corresponds to a Microsoft SQL Server Native Scoring Information Disclosure vulnerability. Public references in connected documents confirm information disclosure as the impact vector, with exploitation likely via SQL Server components, and remediation via Sept 2024 security update...

CVE-2024-37337 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

...