CVE-2023-28304

CVE-2023-28304 affects Microsoft ODBC/OLE DB drivers for SQL Server (e.g., ODBC Driver 17/18, OLE DB Driver 18/19). Root cause: insufficient input validation in the Windows ODBC and OLE DB drivers. Impact: can lead to remote/local arbitrary code execution depending on source; CVSS shows local att...

CVE-2023-23375

CVE-2023-23375 covers a Microsoft ODBC and OLE DB remote code execution vulnerability. Connected sources indicate vulnerable components include Microsoft ODBC Driver 17/18 and Microsoft OLE DB Driver 18 (SQL Server), with PT-2023-2559 citing insufficient input validation as the underlying issue i...