CVE-2024-37334

CVE-2024-37334 refers to the Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Connected sources confirm an RCE flaw in the OLE DB Driver when a vulnerable client connects to a malicious SQL Server, with the issue arising from a missing security update. The Nessus plugin...

CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37330

CVE-2024-37330 affects the SQL Server Native Client OLE DB Provider and is described as a Remote Code Execution vulnerability with CVSSv3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8. Connected sources confirm the issue is part of SQL Server OLE DB client/provider components and that th...

CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37329

CVE-2024-37329 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The initial documents identify the affected component as the OLE DB Provider used by SQL Server clients, with the root cause described as a remote code execution path when interacting with the...

CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37327 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37327

CVE-2024-37327 is a vulnerability in the SQL Server Native Client OLE DB Provider that enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low attack complexity, no privileges required, but user interaction is required. Technical details in connected d...

CVE-2024-37328

CVE-2024-37328 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. CVSSv3.1 base score 8.8 (HIGH) with Network attack vector and user interaction required, implying exploitation via a crafted data response when the client driver is used to connect to a SQL Se...

CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37327 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37326

CVE-2024-37326 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The impact is high (CVSS v3.1: 8.8, Confidentiality/Integrity/Availability: High) with network attack vector, no privileges required, but user interaction is required. Affected component is the SQL S...

CVE-2024-37326 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449

CVE-2024-21449 is a vulnerability in the Microsoft SQL Server Native Client OLE DB Provider that enables remote code execution. Affected component: SQL Server Native Client OLE DB Provider (client/driver) used by SQL Server and clients. Root cause: improper handling of data returned by the provid...

CVE-2024-37326 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21449 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37324

CVE-2024-37324 is a vulnerability in the SQL Server Native Client OLE DB Provider that enables remote code execution. The reliable sources in the provided documents confirm the affected component as the SQL Server Native Client OLE DB Provider and indicate an RCE impact. Microsoft has released up...