Microsoft update

KB5046858

Security Update

View on Microsoft →

Fixed in

Microsoft SQL Server 2017 for x64-based Systems (CU 31) 14.0.3485.1

Fixes 31 records

TI-2024-32693 CVE-2024-49018 · GHSA-pxx2-jxr9-c92g

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01631 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-197

TI-2024-32692 CVE-2024-49017 · GHSA-hx47-p5gg-xw55

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32691 CVE-2024-49016 · GHSA-qc59-4rgm-3c5c

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-416

TI-2024-32690 CVE-2024-49015 · GHSA-4v5h-vp2v-p65r

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 15.0.4410.1, 14.0.2070.1 +4 CWE-122

TI-2024-32689 CVE-2024-49014 · GHSA-4cgm-m7vx-9pxr

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-415

TI-2024-32688 CVE-2024-49013 · GHSA-w9j9-29jw-fj46

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32687 CVE-2024-49012 · GHSA-h4qj-345r-3p67

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32686 CVE-2024-49011 · GHSA-7m49-66f5-827f

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32685 CVE-2024-49010 · GHSA-8gvm-rm96-9p7v

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32684 CVE-2024-49009 · GHSA-8mjq-9vqf-24jc

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32683 CVE-2024-49008 · GHSA-3jfq-x5rf-pxwc

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32682 CVE-2024-49007 · GHSA-37x8-vc3h-28p6

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32681 CVE-2024-49006 · GHSA-jjp9-999r-m9vg

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32680 CVE-2024-49005 · GHSA-9rpx-w5w4-cq4r

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01527 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32679 CVE-2024-49004 · GHSA-5w7v-4rv8-26wg

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01527 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32678 CVE-2024-49003 · GHSA-3q5g-jw35-qh3g

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01527 Published 2024-11-12 Fixed in 15.0.4410.1, 14.0.2070.1 +4 CWE-416

TI-2024-32677 CVE-2024-49002 · GHSA-5cr8-75x7-7j9w

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01527 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32676 CVE-2024-49001 · GHSA-29cm-m432-745j

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01527 Published 2024-11-12 Fixed in 15.0.4410.1, 14.0.2070.1 +4 CWE-122

TI-2024-32675 CVE-2024-49000 · GHSA-hj7x-pcrh-84jj

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01527 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32674 CVE-2024-48999 · GHSA-vv2x-chjj-4ppm

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32673 CVE-2024-48998 · GHSA-77hr-fpmg-vvgr

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32672 CVE-2024-48997 · GHSA-fh4x-8p68-8qg2

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32671 CVE-2024-48996 · GHSA-5x3v-28rm-5hqx

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32670 CVE-2024-48995 · GHSA-mrxr-g8pq-3495

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32669 CVE-2024-48994 · GHSA-jgw6-7hrc-742j

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32668 CVE-2024-48993 · GHSA-p6vx-vqj8-q8r8

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-29107 CVE-2024-43462 · GHSA-wm92-8qr7-r99c

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 15.0.4410.1, 14.0.2070.1 +4 CWE-122

TI-2024-29104 CVE-2024-43459 · GHSA-5pfq-57jv-xgm6

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-416

TI-2024-25533 CVE-2024-38255 · GHSA-c7hj-rgqx-4m7j

SQL Server Native Client Remote Code Execution Vulnerability

MEDIUM 43

SQL Server Native Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +4 CWE-122

TI-2024-32712 CVE-2024-49043 · GHSA-p3qp-q8pw-qf3p

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

LOW 37

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00615 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +6 CWE-426

TI-2024-32695 CVE-2024-49021 · GHSA-j85c-4frx-f93r

Microsoft SQL Server Remote Code Execution Vulnerability

LOW 37

Microsoft SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00769 Published 2024-11-12 Fixed in 14.0.2070.1, 15.0.2130.3 +6 CWE-416