Multiple vulnerabilities in Microsoft SQL Server

Descrição

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Microsoft SQL Server can be exploited remotely to gain privileges.
4. An information disclosure vulnerability in Microsoft SQL Server can be exploited remotely to obtain sensitive information.

Comunicados originais

• CVE-2024-37337

• CVE-2024-37335
• CVE-2024-26191
• CVE-2024-37980
• CVE-2024-37342
• CVE-2024-37965
• CVE-2024-37339
• CVE-2024-43474
• CVE-2024-37966
• CVE-2024-37338
• CVE-2024-26186
• CVE-2024-37340
• CVE-2024-37341

Produtos relacionados

• Microsoft-SQL-Server
• Microsoft-Azure

Lista de CVE

• CVE-2024-37337
  warning
• CVE-2024-37335
  critical
• CVE-2024-26191
  critical
• CVE-2024-37980
  critical
• CVE-2024-37342
  warning
• CVE-2024-37965
  critical
• CVE-2024-37339
  critical
• CVE-2024-43474
  critical
• CVE-2024-37966
  high
• CVE-2024-37338
  critical
• CVE-2024-26186
  critical
• CVE-2024-37340
  critical
• CVE-2024-37341
  critical

Lista de KB

• 5042211
• 5042209
• 5042207
• 5042214
• 5042215
• 5042578
• 5042749
• 5042217
• 5046060
• 5046059
• 5046062
• 5046061
• 5046063
• 5046056
• 5046058
• 5046057

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com