Remote Code Execution Vulnerability Affects Microsoft OLE DB Driver for SQL Server
CVE-2024-28909
Summary
The Microsoft OLE DB Driver for SQL Server is susceptible to a remote code execution vulnerability, which can be exploited by attackers to execute malicious code on affected systems. This poses a significant risk as it may lead to unauthorized access and the potential compromise of sensitive data. Organizations utilizing the OLE DB Driver for SQL Server should take immediate action to evaluate their systems and apply available patches to mitigate this critical security threat. Ensuring timely updates and maintaining security protocols is essential to protect against such vulnerabilities.
Affected Version(s)
Microsoft OLE DB Driver 18 for SQL Server Unknown 18.0.0 < 18.7.0002.0
Microsoft OLE DB Driver 19 for SQL Server Unknown 19.0.0 < 19.3.0003.0
Microsoft SQL Server 2019 (CU 25) x64-based Systems 15.0.0 < 15.0.4360.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved