CVE-2024-21333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21333

CVE-2024-21333 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The advisory data indicates an RCE in the Native Client OLE DB Provider used by SQL Server clients, with a CVSSv3.1 base score of 8.8 (Network, Low attack complexity, No privileges required, user int...

CVE-2024-21335

CVE-2024-21335 is a SQL Server Native Client OLE DB Provider remote code execution vulnerability. The connected sources confirm the flaw affects the OLE DB Provider used by SQL Server clients, enabling arbitrary code execution on a vulnerable system. Public details cite a high impact (CVSSv3 8.8)...

CVE-2024-21335 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21332

CVE-2024-21332 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Affected component: SQL Server Native Client OLE DB Provider. Underlying issue: remote code execution (CVSS v3.1: 8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation would require network access ...

CVE-2024-38088 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-38087 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-38088 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-38088

CVE-2024-38088 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. It affects Microsoft SQL Server components and is rated CVSSv3.1 8.8 (High) with network attack vector and required user interaction. The issue is being addressed via July 2024 Microsoft secur...

CVE-2024-38087

CVE-2024-38087 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Affected component: SQL Server Native Client OLE DB Provider (client and server interaction via the OLE DB driver). Root cause: vulnerability in the OLE DB Provider that can allow arbitrary code exec...

CVE-2024-38087 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

sqlserver.com.xx3.kz Cross Site Scripting vulnerability OBB-3942397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

KB5040936 - Description of the security update for SQL Server 2022 GDR: July 9, 2024

None None...

KB5040948 - Description of the security update for SQL Server 2019 CU27: July 9, 2024

None None...

KB5040942 - Description of the security update for SQL Server 2017 GDR: July 9, 2024

None None...

Description of the security update for Microsoft OLE DB Driver for SQL Server: July 9, 2024

Description of the security update for Microsoft OLE DB Driver for SQL Server: July 9, 2024 Summary This security update resolves a vulnerability. To learn more about the vulnerability, see the following security advisory: CVE-2024-37334 - Microsoft OLE DB Driver for SQL Server Remote Code...

Description of the security update for Microsoft OLE DB Driver 19 for SQL Server: July 9, 2024

Description of the security update for Microsoft OLE DB Driver 19 for SQL Server: July 9, 2024 Summary This security update resolves a vulnerability. To learn more about the vulnerability, see the following security advisory: CVE-2024-37334 - Microsoft OLE DB Driver for SQL Server Remote Code...