CVE-2022-34733
published 2022-09-13CVE-2022-34733: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
PriorityP351high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
1.85%
76.7th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.19444 | 10.0.10240.19444 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.5356 | 10.0.14393.5356 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.3406 | 10.0.17763.3406 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.3406 | 10.0.17763.3406 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.2006 | 10.0.19042.2006 |
| microsoft | windows_10_version_21h1 | >= 10.0.0 < 10.0.19043.2006 | 10.0.19043.2006 |
| microsoft | windows_10_version_21h2 | >= 10.0.19043.0 < 10.0.19044.2006 | 10.0.19044.2006 |
| microsoft | windows_11_version_21h2 | >= 10.0.0 < 10.0.22000.978 | 10.0.22000.978 |
| microsoft | windows_7 | >= 6.1.0 < 6.1.7601.26115 | 6.1.7601.26115 |
| microsoft | windows_7_service_pack_1 | >= 6.1.0 < 6.1.7601.26115 | 6.1.7601.26115 |
| microsoft | windows_8.1 | >= 6.3.0 < 6.3.9600.20571 | 6.3.9600.20571 |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.7601.0 < 6.1.7601.26115 | 6.1.7601.26115 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.21666 | 6.0.6003.21666 |
| microsoft | windows_server_2012 | — | — |
| microsoft | windows_server_2012 | >= 6.2.9200.0 < 6.2.9200.23865 | 6.2.9200.23865 |
| microsoft | windows_server_2012_r2 | >= 6.3.9600.0 < 6.3.9600.20571 | 6.3.9600.20571 |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.5356 | 10.0.14393.5356 |
| microsoft | windows_server_2019 | >= 10.0.17763.0 < 10.0.17763.3406 | 10.0.17763.3406 |
| microsoft | windows_server_2022 | >= 10.0.20348.0 < 10.0.20348.1006 | 10.0.20348.1006 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
vendor_msrc8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j3hf-fmx6-5vv3: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
ghsa_unreviewed·2022-09-14·CVSS 8.8
CVE-2022-35834 [HIGH] GHSA-j3hf-fmx6-5vv3: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34731, CVE-2022-34733, CVE-2022-35835, CVE-2022-35836, CVE-2022-35840.
GHSA
GHSA-3354-f842-x834: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
ghsa_unreviewed·2022-09-14·CVSS 8.8
CVE-2022-35836 [HIGH] CWE-94 GHSA-3354-f842-x834: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34731, CVE-2022-34733, CVE-2022-35834, CVE-2022-35835, CVE-2022-35840.
GHSA
GHSA-rg45-pxx7-cqf5: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
ghsa_unreviewed·2022-09-14·CVSS 8.8
CVE-2022-34731 [HIGH] GHSA-rg45-pxx7-cqf5: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34733, CVE-2022-35834, CVE-2022-35835, CVE-2022-35836, CVE-2022-35840.
GHSA
GHSA-h8mg-3vg2-w6qp: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
ghsa_unreviewed·2022-09-14·CVSS 8.8
CVE-2022-35840 [HIGH] GHSA-h8mg-3vg2-w6qp: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34731, CVE-2022-34733, CVE-2022-35834, CVE-2022-35835, CVE-2022-35836.
GHSA
GHSA-6r3j-wh66-77hq: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
ghsa_unreviewed·2022-09-14·CVSS 8.8
CVE-2022-34733 [HIGH] GHSA-6r3j-wh66-77hq: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34731, CVE-2022-35834, CVE-2022-35835, CVE-2022-35836, CVE-2022-35840.
GHSA
GHSA-7p6j-jj6q-633r: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
ghsa_unreviewed·2022-09-14·CVSS 8.8
CVE-2022-35835 [HIGH] CWE-94 GHSA-7p6j-jj6q-633r: Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability
Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34731, CVE-2022-34733, CVE-2022-35834, CVE-2022-35836, CVE-2022-35840.
Microsoft
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
vendor_msrc·2022-09-13·CVSS 8.8
CVE-2022-34733 [HIGH] Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
FAQ: How could an attacker exploit this vulnerability?
An attacker could exploit the vulnerability by tricking an authenticated user into attempting to connect to a malicious SQL server via OLEDB, which could result in the server receiving a malicious networking packet. This could allow the attacker to execute code remotely on the client.
Windows OLE DB: Windows OLE DB
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Remote Code Execution
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5017315
Reference: https://su
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-09-13
Published