CVE-2024-28945

CVE-2024-28945 concerns the Microsoft OLE DB Driver for SQL Server. Connected sources confirm this is a remote code execution vulnerability affecting the OLE DB driver family (SQL Server components) and that security updates exist. Nessus/plugin data lists CVE-2024-28945 among related Oracle/ODBC...

CVE-2026-21262

CVE-2026-21262 affects Microsoft SQL Server and is a privilege-escalation vulnerability caused by improper access control. An authorized, network-present attacker with low privileges can elevate to sysadmin, potentially reading/changing data, creating accounts, or altering configurations, as desc...

CVE-2026-32176

CVE-2026-32176 arises from improper neutralization of input in SQL Server, enabling an authorized local user to elevate privileges. Connected sources confirm this is one of multiple SQL Server elevation-of-privilege issues addressed in the Microsoft April 2026 security updates (e.g., KB5084815 fo...

CVE-2024-37980

CVE-2024-37980 is a Microsoft SQL Server Elevation of Privilege vulnerability. Connected sources confirm affected product family as Microsoft SQL Server (various editions/versions in scope). The root cause involves an Elevation of Privilege issue likely exploitable by an authenticated remote atta...

CVE-2024-21332

CVE-2024-21332 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Affected component: SQL Server Native Client OLE DB Provider. Underlying issue: remote code execution (CVSS v3.1: 8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation would require network access ...

CVE-2024-37965

CVE-2024-37965 is a Microsoft SQL Server Elevation of Privilege vulnerability. Exploitation requires authentication and could grant elevated privileges within SQL Server. Public details are supported by Nessus/NVD/NCSC entries and the Microsoft update KB5042215 (SQL Server CU31, Sept 10 2024) whi...

CVE-2024-49043

CVE-2024-49043 is a remote code execution vulnerability in Microsoft.SqlServer.XEvent.Configuration.dll. Connected advisories tie this CVE to SQL Server ecosystems, listing it among a pattern of SQL Server Native Client/XEvent vulnerabilities fixed by November 2024 security updates (KB5046858 for...

CVE-2026-33120

CVE-2026-33120 affects Microsoft SQL Server and is a remote code execution vulnerability. The entry documents a network-based exploit with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8 (...

CVE-2024-43462

CVE-2024-43462 is a SQL Server Native Client Remote Code Execution vulnerability. The connected material ties this CVE to Microsoft SQL Server Native Client remote code execution issues fixed via security updates in November 2024 (KB5046858 for SQL Server 2017 CU31 and KB5046859 for SQL Server 20...

CVE-2024-21308

CVE-2024-21308 affects the SQL Server Native Client OLE DB Provider. The vulnerability enables remote code execution when a vulnerable client communicates with a server presenting malicious data (attack vector: NETWORK; user interaction required). Microsoft released fixes in the July 9, 2024 secu...

CVE-2025-53727

CVE-2025-53727 is an Elevation of Privilege vulnerability in Microsoft SQL Server tied to improper neutralization of SQL elements (SQL injection). Publicly referenced fixes are included in SQL Server 2017 CU31 (build 14.0.3500.1) per KB5063759 and related security updates, and in SQL Server 2017 ...

CVE-2024-49004

CVE-2024-49004 is a SQL Server Native Client Remote Code Execution vulnerability. The issue affects the SQL Server Native Client component and is addressed by Microsoft security updates KB5046858 (SQL Server 2017 CU31) and KB5046859 (SQL Server 2019 GDR), which fix remote code execution via DLL p...

CVE-2024-21335

CVE-2024-21335 is a SQL Server Native Client OLE DB Provider remote code execution vulnerability. The connected sources confirm the flaw affects the OLE DB Provider used by SQL Server clients, enabling arbitrary code execution on a vulnerable system. Public details cite a high impact (CVSSv3 8.8)...

CVE-2024-21331

CVE-2024-21331 corresponds to a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVE is publicly listed with a CVSSv3.1 base score of 8.8 (HIGH) and a network attack vector, with user interaction required, as per the CVSS data in the initial document. The v...

CVE-2024-49017

CVE-2024-49017 is a SQL Server Native Client remote code execution vulnerability affecting Microsoft SQL Server Native Client components. Connected advisories indicate this CVE is addressed via Microsoft security updates (e.g., KB5046857, KB5046858) for SQL Server 2017 GDR/CU31, updating builds t...

CVE-2024-21415

CVE-2024-21415 covers a remote code execution flaw in the SQL Server Native Client OLE DB Provider. According to the July 2024 Patch Tuesday coverage, exploitation would allow an attacker to achieve arbitrary code execution via the client-side OLE DB driver when connecting to a SQL Server, with a...

CVE-2024-28928

CVE-2024-28928 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. Affected component: SQL Server Native Client OLE DB Provider (client/server interaction). Root cause: flaw in the OLE DB Provider enabling arbitrary code execution. Impact: remote code execution with...

CVE-2024-49001

CVE-2024-49001 is a vulnerability in the SQL Server Native Client described as a Remote Code Execution in the SQL Server Native Client. Connected documentation shows affected Microsoft SQL Server Native Client components and specifies fixes delivered via the November 2024 security update for SQL ...

CVE-2024-43474

CVE-2024-43474 is a Microsoft SQL Server information-disclosure vulnerability. Connected sources confirm an authenticated remote access risk that could disclose sensitive database and file information. Security updates exist for multiple SQL Server branches: KB5042217 (SQL Server 2017 GDR), KB504...

CVE-2025-47997

CVE-2025-47997 is an information-disclosure vulnerability in Microsoft SQL Server caused by a race-condition during concurrent access to a shared resource. The issue could allow an authorized user to disclose data over a network. Public details in connected sources indicate Microsoft has issued s...

CVE-2026-26116

CVE-2026-26116 is a SQL Server Elevation of Privilege vulnerability due to improper neutralization of special elements in SQL commands. Affected product: Microsoft SQL Server (SQL Server 2025 GDR) with potential network‑based exploitation and high impact (CVE-2026-26116). The issue is mitigated b...

CVE-2024-21414

CVE-2024-21414 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVSSv3.1 score is 8.8 (NETWORK). Likely exploit involves crafted data returned by the OLE DB Provider, potentially affecting SQL Server clients connecting to vulnerable servers. Microsoft ...

CVE-2024-49015

CVE-2024-49015 is a SQL Server Native Client remote code execution vulnerability. Microsoft fixes are provided in KB5046858 for SQL Server 2017 CU31 and KB5046859 for SQL Server 2019 GDR, addressing the SQL Native Client remote code execution family (CVE-2024-38255, CVE-2024-43459, CVE-2024-43462...

CVE-2024-21317

CVE-2024-21317 affects the SQL Server Native Client OLE DB Provider and is an active SQL Server Client vulnerability that enables remote code execution via the OLE DB driver. The CVE is listed among multiple SQL Server RC vulnerabilities, with a CVSSv3 base score of 8.8 (Network attack, no privil...

CVE-2024-21428

CVE-2024-21428 is a remote code execution vulnerability affecting the SQL Server Native Client OLE DB Provider. The available documents consistently describe it as an RCE issue tied to the Native Client OLE DB Provider in SQL Server. The Nessus entries enumerate this CVE as part of a broader set ...

CVE-2024-48999

CVE-2024-48999 is a SQL Server Native Client remote code execution vulnerability. Connected sources confirm it affects SQL Server native client components and is addressed by Microsoft security updates KB5046858 (SQL Server 2017 CU31) and KB5046859 (SQL Server 2019 GDR), which fix the vulnerabili...

CVE-2025-24999

CVE-2025-24999 is implicated in Microsoft SQL Server Elevation of Privilege via improper access control, enabling an authorized user to escalate privileges over a network. Public details confirm impact surface across SQL Server versions affected by the 2025 security updates; remediation is provid...

CVE-2024-21333

CVE-2024-21333 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The advisory data indicates an RCE in the Native Client OLE DB Provider used by SQL Server clients, with a CVSSv3.1 base score of 8.8 (Network, Low attack complexity, No privileges required, user int...

CVE-2024-49000

CVE-2024-49000 is a SQL Server Native Client remote code execution vulnerability. Public details in connected KB5058718 indicate exploitation against SQL Server components and a fix provided in the July 2025 security update for SQL Server 2016 SP3 GDR (build 13.0.6460.7). Affected: SQL Server 201...

CVE-2024-48996

CVE-2024-48996 is a remote code execution vulnerability affecting Microsoft SQL Server Native Client. The advisory notes that the vulnerability exists in the SQL Server Native Client component and can allow total compromise of the affected system, with CVSSv3.1 base score 8.8 (Network, Low attack...

CVE-2024-49014

CVE-2024-49014 is a SQL Server Native Client remote code execution vulnerability that Microsoft fixed in a 2024 November security update. The related advisories (KB5046857/KB5046858) enumerate CVE-2024-49014 among a set of SQL Native Client remote code execution bugs and document that the updates...

CVE-2024-48994

CVE-2024-48994 is a remote code execution vulnerability in the SQL Server Native Client. Microsoft security updates KB5046858/KB5046859 fix the issue across affected SQL Server Native Client components. For SQL Server 2017 CU31, builds include SQLServer2017-KB5046858-x64.exe (product version 14.0...

CVE-2024-49018

CVE-2024-49018 is a remote code execution vulnerability in SQL Server Native Client. The vulnerability affects Microsoft SQL Server Native Client and is linked to the SQL Server Native Client Remote Code Execution family of issues. Microsoft addressed it in security updates KB5046858 (SQL Server ...

CVE-2025-49758

CVE-2025-49758 affects Microsoft SQL Server (e.g., SQL Server 2017 line) and is described as an elevation-of-privilege vulnerability caused by improper neutralization of certain elements in SQL commands (SQL injection) that can be exploited by an authenticated, network-present attacker to gain el...

CVE-2024-37340

CVE-2024-37340 is a Microsoft SQL Server Native Scoring remote code execution vulnerability. Connected sources confirm affected component scope relates to SQL Server with Machine Learning/Native Scoring functionality and indicate a fix was released in the September 2024 updates. Microsoft’s KB504...

CVE-2024-21373

CVE-2024-21373 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The affected component is the SQL Server Native Client OLE DB Provider, and the vulnerability enables code execution on the client when connecting to a vulnerable SQL Server instance, with a C...

CVE-2024-21398

CVE-2024-21398 is a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider (and related SQL Server OLE DB Driver for SQL Server). The CVSSv3.1 base score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The issue can be exploited remotely if a vulnerable client connects ...

CVE-2024-49016

CVE-2024-49016 is a SQL Server Native Client Remote Code Execution vulnerability affecting the SQL Server Native Client component. The advisory context indicates this is addressed by security updates in KB5046858 (SQL Server 2017 CU31) and KB5046859 (SQL Server 2019 GDR), which fix remote code ex...

CVE-2024-21425

CVE-2024-21425 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability affecting the SQL Server Native Client OLE DB Provider. The issue enables arbitrary code execution via the client driver when connecting to SQL Server and is rated CVSSv3.1 8.8 (High) with network att...

CVE-2024-49009

CVE-2024-49009 is a SQL Server Native Client remote code execution vulnerability. Connected sources indicate this CVE is part of Microsoft’s November 2024 SQL Server security updates for SQL Server 2017 (GDR) and SQL Server 2017 CU31, addressing a family of vulnerabilities in the SQL Server Nativ...

CVE-2024-49008

SQL Server Native Client remote code execution (CVE-2024-49008) affects SQL Server Native Client as described in Microsoft advisories. The associated security updates KB5046858 (SQL Server 2017 CU31, build 14.0.3485.1) and KB5046859 (SQL Server 2019 GDR, build 15.0.2130.3) fix this vulnerability ...

CVE-2024-48997

Summary (CVE-2024-48997) : A remote code execution vulnerability in SQL Server Native Client has been fixed. The CVE is listed among vulnerabilities addressed by Microsoft SQL Server updates (KB5046858 for SQL Server 2017 CU31 and KB5046859 for SQL Server 2019 GDR) and is also included in the Nov...

CVE-2024-49005

CVE-2024-49005: SQL Server Native Client Remote Code Execution Vulnerability. Exploitation is associated with the SQL Server Native Client component and is addressed by Microsoft security updates. The related advisories show multiple CVEs (including CVE-2024-49005) fixed in SQL Server Native Clie...

CVE-2024-37966

CVE-2024-37966 is a Microsoft SQL Server Native Scoring information disclosure vulnerability. Public docs identify it as an information disclosure issue in the SQL Server Native Scoring component, with the vulnerability enabling an attacker to access sensitive data. The connected update reference...

CVE-2024-37335

CVE-2024-37335 corresponds to a remote code execution vulnerability in the Microsoft SQL Server Native Scoring component. Public documentation confirms this CVE is part of a family of SQL Server Native Scoring vulnerabilities that allow an attacker who can reach the SQL Server over the network to...

CVE-2024-49011

CVE-2024-49011 is a SQL Server Native Client Remote Code Execution vulnerability. Public data confirms it affects SQL Server Native Client component and is addressed by Microsoft security updates KB5046858 (SQL Server 2017 CU31) and KB5046859 (SQL Server 2019 GDR), which fix the vulnerability acr...

CVE-2024-26191

CVE-2024-26191 is a remote code execution vulnerability in Microsoft SQL Server Native Scoring. Exploitation could allow an attacker to execute arbitrary code by sending crafted input over the network, with no user interaction and required/low privileges. Public documents confirm this CVE is addr...

CVE-2024-37339

CVE-2024-37339 corresponds to a remote code execution vulnerability in Microsoft SQL Server Native Scoring (Machine Learning Services). The flaw allows an attacker to execute arbitrary code on the vulnerable system. The base metrics show: AV:N, AC:L, PR:L, UI:N, S:U, C/H/I/A: H, with a base score...

CVE-2024-49002

CVE-2024-49002 is a SQL Server Native Client Remote Code Execution vulnerability. Connected documents confirm this vulnerability affects Microsoft SQL Server Native Client components and is addressed by November 2024 security updates. The MSKB KB5046858 (for SQL Server 2017 CU31) and KB5046859 (f...

CVE-2024-37337

CVE-2024-37337 corresponds to a Microsoft SQL Server Native Scoring Information Disclosure vulnerability. Public references in connected documents confirm information disclosure as the impact vector, with exploitation likely via SQL Server components, and remediation via Sept 2024 security update...