CVE-2023-36785

CWE-1915 documents5 sources
Severity
7.8HIGH
EPSS
0.5%
top 34.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Microsoft Microsoft Odbc Driver 17 FOR SQL Server ON LinuxMicrosoft Microsoft Odbc Driver 17 FOR SQL Server ON MacosMicrosoft Microsoft Odbc Driver 17 FOR SQL Server ON Windows+9 more
Timeline
PublishedOct 10
Latest updateJan 15

Description

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages12 packages

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
CVEList
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability↗2023-10-10
▶
GHSA
GHSA-j6fm-28rm-xqwj: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability↗2023-10-10
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle GoldenGate Risk Matrix: Install (Microsoft ODBC Driver) — CVE-2023-36785↗2025-01-15
▶
Microsoft
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability↗2023-10-10
▶
CVE-2023-36785 (HIGH CVSS 7.8) | Microsoft ODBC Driver for SQL Serve | cvebase.io