Remote Code Execution Vulnerability Affects Microsoft OLE DB Driver for SQL Server
CVE-2024-28909

8.8HIGH

Summary

The Microsoft OLE DB Driver for SQL Server is susceptible to a remote code execution vulnerability, which can be exploited by attackers to execute malicious code on affected systems. This poses a significant risk as it may lead to unauthorized access and the potential compromise of sensitive data. Organizations utilizing the OLE DB Driver for SQL Server should take immediate action to evaluate their systems and apply available patches to mitigate this critical security threat. Ensuring timely updates and maintaining security protocols is essential to protect against such vulnerabilities.

Affected Version(s)

Microsoft OLE DB Driver 18 for SQL Server Unknown 18.0.0 < 18.7.0002.0

Microsoft OLE DB Driver 19 for SQL Server Unknown 19.0.0 < 19.3.0003.0

Microsoft SQL Server 2019 (CU 25) x64-based Systems 15.0.0 < 15.0.4360.2

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.