Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVE-2023-36417

7.8HIGH

Key Information:

Vendor: Microsoft
Status: Microsoft Sql Server 2019 (gdr); Microsoft Sql Server 2022 (gdr); Microsoft Ole Db Driver 19 For Sql Server; Microsoft Ole Db Driver 18 For Sql Server
Vendor: CVE Published:; 10 October 2023

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft OLE DB Driver 18 for SQL Server Unknown 18.0.0 < 18.6.0007.0

Microsoft OLE DB Driver 19 for SQL Server Unknown 19.0.0 < 19.3.0002.0

Microsoft SQL Server 2019 (CU 22) x64-based Systems 15.0.0 < 15.0.4326.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

NVD DatabaseMitre DatabaseMicrosoft Feed