Multiple vulnerabilities in Microsoft SQL Server

Descripción

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Microsoft SQL Server can be exploited remotely to gain privileges.
4. An information disclosure vulnerability in Microsoft SQL Server can be exploited remotely to obtain sensitive information.

Notas informativas originales

• CVE-2024-37337

• CVE-2024-37335
• CVE-2024-26191
• CVE-2024-37980
• CVE-2024-37342
• CVE-2024-37965
• CVE-2024-37339
• CVE-2024-43474
• CVE-2024-37966
• CVE-2024-37338
• CVE-2024-26186
• CVE-2024-37340
• CVE-2024-37341

Productos relacionados

• Microsoft-SQL-Server
• Microsoft-Azure

Lista CVE

• CVE-2024-37337
  warning
• CVE-2024-37335
  critical
• CVE-2024-26191
  critical
• CVE-2024-37980
  critical
• CVE-2024-37342
  warning
• CVE-2024-37965
  critical
• CVE-2024-37339
  critical
• CVE-2024-43474
  critical
• CVE-2024-37966
  high
• CVE-2024-37338
  critical
• CVE-2024-26186
  critical
• CVE-2024-37340
  critical
• CVE-2024-37341
  critical

Lista KB

• 5042211
• 5042209
• 5042207
• 5042214
• 5042215
• 5042578
• 5042749
• 5042217
• 5046060
• 5046059
• 5046062
• 5046061
• 5046063
• 5046056
• 5046058
• 5046057

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com