CVE-2024-28931

CVE-2024-28931 affects the Microsoft ODBC Driver for SQL Server. The vulnerability enables remote code execution with network access and requires no privileges, with user interaction reportedly involved per CVSS metrics. The CVE is addressed by updates across ODBC Driver versions; example fixes i...

CVE-2024-28929

CVE-2024-28929 affects the Microsoft ODBC Driver for SQL Server. Public advisories and update docs show a remote code execution vulnerability in the ODBC driver family, with attackers potentially bypassing authentication and executing arbitrary commands. Remediation is to install the security upd...

CVE-2024-28915

CVE-2024-28915 refers to a Remote Code Execution vulnerability in the Microsoft OLE DB Driver for SQL Server. The affected component is the OLE DB driver (Microsoft OLE DB Driver for SQL Server) used to access SQL Server data. According to connected sources, Microsoft released security updates to...

CVE-2024-28913

Summary: CVE-2024-28913 is a remote code execution vulnerability in the Microsoft OLE DB Driver for SQL Server. Multiple connected sources (Nessus patch notes and Microsoft update KBs) confirm this family of RCE issues affecting the OLE DB driver components and list CVE-2024-28913 among the vulne...

CVE-2024-28914

CVE-2024-28914 is a Remote Code Execution vulnerability in the Microsoft OLE DB Driver for SQL Server. The CVE applies to the OLE DB Driver components that enable database access, with a network-facing attack vector and the attacker needing no privileges but user interaction is required for explo...

CVE-2024-28911

CVE-2024-28911 is a remote code execution vulnerability in the Microsoft OLE DB Driver for SQL Server. Public sources detail affected components as Microsoft OLE DB Driver for SQL Server (drivers used with SQL Server) and indicate the root cause relates to remote code execution via the OLE DB int...

CVE-2024-28912

The CVE CVE-2024-28912 affects Microsoft OLE DB Driver for SQL Server. It is a remote code execution vulnerability (attack vector: network) in the OLE DB driver components that can allow an attacker to execute arbitrary code on the target system with no privileges and user interaction required. I...

CVE-2024-28910

CVE-2024-28910 is a Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Connected sources confirm this affects the Microsoft OLE DB Driver for SQL Server (components used by SQL Server clients) and is addressed via security updates released in the April 9, 2024 updates. Mi...

CVE-2024-28908

CVE-2024-28908 refers to a remote code execution vulnerability in Microsoft OLE DB Driver for SQL Server. The issue is associated with the OLE DB Driver components used with SQL Server and has been addressed by Microsoft in APR 2024 security updates (e.g., KB5035432 for SQL Server 2019/KB5035434 ...

CVE-2024-28906

CVE-2024-28906 refers to a remote-code-execution vulnerability in the Microsoft OLE DB Driver for SQL Server. The issue affects the OLE DB Driver for SQL Server components and can allow an attacker to execute arbitrary code on affected systems, with a network attack vector and no privileges requi...

CVE-2024-28905

Microsoft Brokering File System Elevation of Privilege (CVE-2024-28905) affects the Microsoft Brokering File System component. The vulnerability is an elevation of privilege issue; exact root cause and affected subcomponents are not detailed in the provided documents. Public exploits exist; explo...

CVE-2024-28903

CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...

CVE-2024-28902

CVE-2024-28902 is associated with Windows Remote Access Connection Manager and is listed in an ENISA/NCSC-style advisory as a local, low-complexity information-disclosure vulnerability with potential impact to data confidentiality (CVE-2024-28902, Windows Remote Access Connection Manager). The co...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2024-28898

CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...

CVE-2024-28896

CVE-2024-28896 is a Secure Boot security feature bypass with HIGH impact (C:I:H:A:H) and adjacent access (AV:A, AC:H, UI:N, PR:N). Descriptions show no user interaction or privileges required. EUVD-2024-25962 and Windows Secure Boot mappings reference this CVE among related Secure Boot fixes; no ...

CVE-2024-28923

CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...

CVE-2024-28921

CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...

CVE-2024-28919

CVE-2024-28919 is listed in the Windows Secure Boot area as a "Secure Boot Security Feature Bypass" vulnerability. The connected documents identify it as a local-bypass vulnerability affecting Secure Boot, with a CVSSv3.1 base score of 6.7 (Impact: High on confidentiality, integrity, and availabi...

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...