Microsoft update

KB5042578

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2022 for x64-based Systems (CU 14) 16.0.4140.3

Fixes 11 records

TI-2024-25283 CVE-2024-37980 · GHSA-phx5-vwwh-9gm8

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 46

Microsoft SQL Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01363 Published 2024-09-10 Fixed in 13.0.6445.1, 13.0.7040.1 +6 CWE-269

TI-2024-25269 CVE-2024-37965 · GHSA-3g3h-v46v-fqhf

Microsoft SQL Server Elevation of Privilege Vulnerability

MEDIUM 43

Microsoft SQL Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01702 Published 2024-09-10 Fixed in 13.0.6445.1, 13.0.7040.1 +6 CWE-20

TI-2024-24852 CVE-2024-37340 · GHSA-mhc8-f455-fqc9

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-822

TI-2024-24851 CVE-2024-37339 · GHSA-5999-prhj-w7r5

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-822

TI-2024-24850 CVE-2024-37338 · GHSA-r3q3-7r4r-xv74

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-125

TI-2024-24847 CVE-2024-37335 · GHSA-3r5x-g9r7-3w5m

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-122

TI-2024-17280 CVE-2024-26191 · GHSA-6jf8-wh8p-q53m

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-122

TI-2024-17276 CVE-2024-26186 · GHSA-xr4h-93hj-62q2

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

MEDIUM 43

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01623 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-416

TI-2024-24854 CVE-2024-37342 · GHSA-pgxx-gq7v-fg8m

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

LOW 37

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0166 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-125

TI-2024-24849 CVE-2024-37337 · GHSA-m65g-rcvq-qjj5

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

LOW 37

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0166 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-197

TI-2024-25270 CVE-2024-37966 · GHSA-p5j4-6jm5-6fj9

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

LOW 36

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.02193 Published 2024-09-10 Fixed in 14.0.3475.1, 14.0.2060.1 +4 CWE-125