Microsoft update

KB5036335

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2019 for x64-based Systems (CU 25) 15.0.4360.2

Fixes 38 records

TI-2024-19132 CVE-2024-28938 · GHSA-c37g-ppfr-pj55

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

HIGH 73

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0233 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +9 CWE-125

TI-2024-19748 CVE-2024-29985 · GHSA-48pv-j3x3-cw7v

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0242 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-122

TI-2024-19747 CVE-2024-29984 · GHSA-9rh9-6hgf-65f4

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.024 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-122

TI-2024-19745 CVE-2024-29982 · GHSA-q32p-r22r-wrmj

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.024 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19230 CVE-2024-29048 · GHSA-chvw-vg4m-qwm6

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19229 CVE-2024-29047 · GHSA-g459-f54g-xh4f

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 CWE-122

TI-2024-19228 CVE-2024-29046 · GHSA-vjwp-m299-85vg

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.2110.4, 19.3.0003.0 +4 CWE-122

TI-2024-19226 CVE-2024-29044 · GHSA-r9c4-3p3w-9g45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19225 CVE-2024-29043 · GHSA-78v4-x94j-xvq4

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-416

TI-2024-19138 CVE-2024-28944 · GHSA-w4pg-xm2c-w4wj

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-197

TI-2024-19137 CVE-2024-28943 · GHSA-7vfh-vh8v-495r

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-122

TI-2024-19136 CVE-2024-28942 · GHSA-gcxm-gg23-j9vq

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-190

TI-2024-19131 CVE-2024-28937 · GHSA-2jr3-vfc4-xrm2

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0233 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +9 CWE-122

TI-2024-19130 CVE-2024-28936 · GHSA-6p2g-wx5c-v95j

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +9 CWE-190

TI-2024-19129 CVE-2024-28935 · GHSA-6234-wr38-h5fr

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02356 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +9 CWE-122

TI-2024-19128 CVE-2024-28934 · GHSA-8266-hvc3-3w4r

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +9 CWE-121

TI-2024-19127 CVE-2024-28933 · GHSA-jvcr-j6x4-hh24

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.11.35, 17.9.6 +9 CWE-191

TI-2024-19126 CVE-2024-28932 · GHSA-mwxw-jp9c-r89r

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +9 CWE-122

TI-2024-19125 CVE-2024-28931 · GHSA-mcv4-77gg-xfvp

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +9 CWE-190

TI-2024-19124 CVE-2024-28930 · GHSA-454g-4qqq-2j4g

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02356 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +9 CWE-191

TI-2024-19123 CVE-2024-28929 · GHSA-cfrx-fq8m-28pv

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02399 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +9 CWE-190

TI-2024-19121 CVE-2024-28927 · GHSA-65q5-5rwq-hg89

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-122

TI-2024-19109 CVE-2024-28914 · GHSA-p6rw-7v7m-xm65

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-122

TI-2024-19105 CVE-2024-28910 · GHSA-mghh-4m9h-vqxx

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02812 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19104 CVE-2024-28909 · GHSA-gwgm-pgv3-cwqf

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-122

TI-2024-19103 CVE-2024-28908 · GHSA-29x8-vr7f-rwm6

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02356 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19101 CVE-2024-28906 · GHSA-fvm9-r7wp-vc8g

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 45

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02415 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-122

TI-2024-19135 CVE-2024-28941 · GHSA-4gjr-9vhm-vxgx

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02259 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-122

TI-2024-19133 CVE-2024-28939 · GHSA-9x76-66cx-ppf5

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02268 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-209

TI-2024-19120 CVE-2024-28926 · GHSA-p9h2-24g6-pg7j

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02268 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-122

TI-2024-19110 CVE-2024-28915 · GHSA-cjm7-r96j-5xx3

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02213 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19108 CVE-2024-28913 · GHSA-r38q-xpfq-7wq4

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02294 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19107 CVE-2024-28912 · GHSA-8gfv-66rm-fqmg

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02268 Published 2024-04-09 Fixed in 16.0.4120.1, 15.0.4360.2 +4 CWE-122

TI-2024-19746 CVE-2024-29983 · GHSA-q6wr-5cjv-cqvh

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.024 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19134 CVE-2024-28940 · GHSA-xgv9-xhqv-rqvg

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02351 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-122

TI-2024-19139 CVE-2024-28945 · GHSA-9h9f-x9hq-6x6p

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02268 Published 2024-04-09 Fixed in 15.0.2110.4, 16.0.1115.1 +4 CWE-191

TI-2024-19106 CVE-2024-28911 · GHSA-c344-5fxf-w34m

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02213 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-122

TI-2024-19227 CVE-2024-29045 · GHSA-v832-7hv6-458x

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

LOW 38

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01777 Published 2024-04-09 Fixed in 15.0.4360.2, 16.0.4120.1 +4 CWE-121