Multiple vulnerabilities in Microsoft SQL Server

Description

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Microsoft SQL Server can be exploited remotely to gain privileges.
4. An information disclosure vulnerability in Microsoft SQL Server can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2024-37337

• CVE-2024-37335
• CVE-2024-26191
• CVE-2024-37980
• CVE-2024-37342
• CVE-2024-37965
• CVE-2024-37339
• CVE-2024-43474
• CVE-2024-37966
• CVE-2024-37338
• CVE-2024-26186
• CVE-2024-37340
• CVE-2024-37341

Related products

• Microsoft-SQL-Server
• Microsoft-Azure

CVE list

• CVE-2024-37337
  high
• CVE-2024-37335
  critical
• CVE-2024-26191
  critical
• CVE-2024-37980
  critical
• CVE-2024-37342
  high
• CVE-2024-37965
  critical
• CVE-2024-37339
  critical
• CVE-2024-43474
  critical
• CVE-2024-37966
  high
• CVE-2024-37338
  critical
• CVE-2024-26186
  critical
• CVE-2024-37340
  critical
• CVE-2024-37341
  critical

KB list

• 5042211
• 5042209
• 5042207
• 5042214
• 5042215
• 5042578
• 5042749
• 5042217

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com