Microsoft update

KB5040939

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2022 for x64-based Systems (CU 13) 16.0.4131.2

Fixes 38 records

TI-2024-24844 CVE-2024-37332 · GHSA-r28v-7fxx-9gq6

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24843 CVE-2024-37331 · GHSA-qxfj-qf69-9p42

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24830 CVE-2024-37318 · GHSA-jjpm-gvxx-h6vg

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 15.0.4382.1, 16.0.4131.2 +6 CWE-122

TI-2024-23333 CVE-2024-35272 · GHSA-44wq-g436-pmwv

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 15.9.66, 16.11.40 +11 CWE-122

TI-2024-23332 CVE-2024-35271 · GHSA-m5w5-hgw3-8rfx

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14187 CVE-2024-21428 · GHSA-2qmf-6mwr-854w

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-190

TI-2024-14175 CVE-2024-21415 · GHSA-7286-89wv-v69p

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14174 CVE-2024-21414 · GHSA-4857-97wp-f4qj

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14158 CVE-2024-21398 · GHSA-325h-9c73-3f3f

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01854 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14133 CVE-2024-21373 · GHSA-w9x7-cxc4-4r29

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14095 CVE-2024-21335 · GHSA-cxpc-3cxw-7786

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14093 CVE-2024-21333 · GHSA-2524-2jp2-r468

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14092 CVE-2024-21332 · GHSA-j8fv-9525-7cpp

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 44

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-416

TI-2024-25377 CVE-2024-38088 · GHSA-h7pv-4wq4-68q9

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-25376 CVE-2024-38087 · GHSA-xgvc-c35w-mf28

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-415

TI-2024-24848 CVE-2024-37336 · GHSA-7chr-6pmm-vxv9

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01675 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-190

TI-2024-24846 CVE-2024-37334 · GHSA-9x4p-r449-m72x

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01645 Published 2024-07-09 Fixed in 15.0.2116.2, 16.0.1121.4 +4 CWE-122

TI-2024-24845 CVE-2024-37333 · GHSA-g9p4-f5mp-7653

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24842 CVE-2024-37330 · GHSA-ffx5-7wrg-3r5w

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24841 CVE-2024-37329 · GHSA-q48v-g2g6-wgm4

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24840 CVE-2024-37328 · GHSA-v3qq-52f8-wwmj

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24839 CVE-2024-37327 · GHSA-mrjw-2vh7-3rf9

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24838 CVE-2024-37326 · GHSA-wr44-j4q5-5c9w

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24836 CVE-2024-37324 · GHSA-rrh3-99hm-8jpr

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 16.0.4131.2, 15.0.4382.1 +6 CWE-122

TI-2024-24835 CVE-2024-37323 · GHSA-vxc3-p5vm-3w5q

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-190

TI-2024-24834 CVE-2024-37322 · GHSA-gh6q-395r-5925

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24833 CVE-2024-37321 · GHSA-rvc3-95g3-gwwf

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-24832 CVE-2024-37320 · GHSA-9xfj-m4jq-g85x

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-416

TI-2024-24831 CVE-2024-37319 · GHSA-v7c2-v7qp-q5f4

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-23323 CVE-2024-35256 · GHSA-4prx-8mgq-j2gw

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01554 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-19122 CVE-2024-28928 · GHSA-gvf2-9pvf-3985

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-121

TI-2024-14208 CVE-2024-21449 · GHSA-7pgp-jq9h-cvp5

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14184 CVE-2024-21425 · GHSA-vfqf-p3jg-pjv7

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 15.0.4382.1, 16.0.4131.2 +6 CWE-122

TI-2024-14091 CVE-2024-21331 · GHSA-344r-8fg9-xhm9

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14078 CVE-2024-21317 · GHSA-xwjj-jxqw-mr62

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122

TI-2024-14069 CVE-2024-21308 · GHSA-qcvp-h54c-8wqm

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-416

TI-2024-14064 CVE-2024-21303 · GHSA-whr9-vwj2-5r9j

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01493 Published 2024-07-09 Fixed in 16.0.4131.2, 15.0.4382.1 +6 CWE-416

TI-2024-13512 CVE-2024-20701 · GHSA-gvm9-r8f2-hg82

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01611 Published 2024-07-09 Fixed in 14.0.2056.2, 15.0.2116.2 +6 CWE-122