Remote Code Execution Vulnerability Affects Microsoft OLE DB Driver for SQL Server
CVE-2024-29984
Summary
A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which could allow an attacker to execute arbitrary code on the system. Successful exploitation could result in the attacker gaining access to sensitive information and system resources. Users and organizations utilizing the OLE DB Driver for SQL Server are advised to apply the latest security updates and monitor for any suspicious activity to mitigate potential risks associated with this vulnerability. For more information, please refer to the official Microsoft advisory.
Affected Version(s)
Microsoft OLE DB Driver 18 for SQL Server Unknown 18.0.0 < 18.7.0002.0
Microsoft OLE DB Driver 19 for SQL Server Unknown 19.0.0 < 19.3.0003.0
Microsoft SQL Server 2019 (CU 25) x64-based Systems 15.0.0 < 15.0.4360.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved