116 matches found
CVE-2024-37338
CVE-2024-37338 is a remote code execution vulnerability in Microsoft SQL Server (Machine Learning/Native Scoring components) that can be exploited over the network without user interaction. The CVSS v3.1 base score is 8.8 (HIGH) with RCE, requiring LOW privileges and network access; impact is hig...
CVE-2024-49007
CVE-2024-49007 is a SQL Server Native Client remote code execution vulnerability. The CVE is tied to SQL Server Native Client components used by Microsoft SQL Server. Connected documents indicate this issue is addressed in Microsoft security updates (KB5046857 and KB5046858) for SQL Server 2017 G...
CVE-2024-49012
CVE-2024-49012 is a Microsoft SQL Server Native Client remote code‑execution vulnerability. Public docs indicate the issue resides in the Native Client component and can allow an attacker to execute code on the server when a client connects to a rogue SQL Server, with exploitation requiring user ...
CVE-2024-37342
CVE-2024-37342 is a Microsoft SQL Server information-disclosure vulnerability in the SQL Server Native Scoring/Machine Learning components. Public details across connected documents confirm: affected software includes SQL Server 2017 (GDR) and SQL Server 2022 CU14 builds; the issue is tracked as ...
CVE-2024-43459
CVE-2024-43459 is a Remote Code Execution hole in Microsoft SQL Server Native Client. Public docs note it affects SQL Server Native Client components and was addressed in security updates KB5046858 (SQL Server 2017 CU31) and KB5046859 (SQL Server 2019 GDR), with builds indicating patched versions...
CVE-2024-48993
CVE-2024-48993 is a vulnerability in the SQL Server Native Client that enables Remote Code Execution over the network. The connected documents identify the affected surface as the SQL Server Native Client component used by SQL Server (and related clients), with a root vulnerability that allows an...
CVE-2024-48998
CVE-2024-48998 affects SQL Server Native Client and is a remote code execution vulnerability. The vulnerability exists in the SQL Server Native Client component and can be triggered when a client connects to a malicious server, allowing an attacker to execute arbitrary code on the target host. Th...
CVE-2024-49003
CVE-2024-49003 is a remote code execution vulnerability in the SQL Server Native Client affecting Microsoft SQL Server components. The issue is described as a SQL Server Native Client Remote Code Execution Vulnerability (noted in the related advisories) with a CVSSv3.1 base score of 8.8 (HIGH), n...
CVE-2024-49013
CVE-2024-49013 is a SQL Server Native Client Remote Code Execution vulnerability. The connected sources identify the flaw as affecting the SQL Server Native Client component and describe that successful exploitation could allow remote code execution via a vulnerable client—leading to compromise o...
CVE-2024-49006
CVE-2024-49006 is a SQL Server Native Client Remote Code Execution vulnerability. Public details in connected docs confirm the affected software is SQL Server Native Client (Native Client libraries used by SQL Server clients) and cite exploitation via remote code execution. The CVSS 3.1 score is ...
CVE-2024-49010
CVE-2024-49010 is a SQL Server Native Client Remote Code Execution vulnerability. Public references indicate it concerns SQL Server Native Client components and is fixed as part of Microsoft security updates (e.g., KB5046858 for SQL Server 2017 CU31 and KB5046859 for SQL Server 2019 GDR). The CVE...
CVE-2025-49718
CVE-2025-49718 is a Microsoft SQL Server information-disclosure vulnerability described as “Use of uninitialized resource in SQL Server” that could allow an attacker to disclose information over the network. Connected sources confirm this CVE is addressed by Microsoft security updates and fixes i...
CVE-2024-48995
CVE-2024-48995 is a SQL Server Native Client remote code execution vulnerability. The Nessus/NVD entries corroborate it as a SQL Server Native Client RCE and link to Microsoft security updates. Microsoft KB5046858 (SQL Server 2017 CU31, November 12, 2024) and KB5046859 (SQL Server 2019 GDR, Novem...
CVE-2025-49759
CVE-2025-49759 is a Microsoft SQL Server Elevation of Privilege vulnerability arising from improper neutralization of input used in SQL commands (SQL injection) in system procedures. An authenticated attacker could exploit this over a network to elevate privileges within the affected SQL Server d...
CVE-2025-55227
CVE-2025-55227 is an Elevation of Privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements in a command (command injection). The CVE entry notes that an authenticated, network-connected attacker can leverage this to elevate privileges. Microsoft adviso...