Multiple vulnerabilities in Microsoft SQL Server

Описание

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft SQL Server Native Scoring can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Microsoft SQL Server can be exploited remotely to gain privileges.
4. An information disclosure vulnerability in Microsoft SQL Server can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2024-37337
  CVE-2024-37335
  CVE-2024-26191
  CVE-2024-37980
  CVE-2024-37342
  CVE-2024-37965
  CVE-2024-37339
  CVE-2024-43474
  CVE-2024-37966
  CVE-2024-37338
  CVE-2024-26186
  CVE-2024-37340
  CVE-2024-37341
  

Связанные продукты

• Microsoft-SQL-Server
• Microsoft-Azure

Список CVE

• CVE-2024-37337
  warning
• CVE-2024-37335
  critical
• CVE-2024-26191
  critical
• CVE-2024-37980
  critical
• CVE-2024-37342
  warning
• CVE-2024-37965
  critical
• CVE-2024-37339
  critical
• CVE-2024-43474
  critical
• CVE-2024-37966
  high
• CVE-2024-37338
  critical
• CVE-2024-26186
  critical
• CVE-2024-37340
  critical
• CVE-2024-37341
  critical

Список KB

• 5042211
• 5042209
• 5042207
• 5042214
• 5042215
• 5042578
• 5042749
• 5042217
• 5046060
• 5046059
• 5046062
• 5046061
• 5046063
• 5046056
• 5046058
• 5046057

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com