CVE-2024-29047

published 2024-04-09

CVE-2024-29047: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Affected

6 ranges

Vendor	Product	Version range	Fixed in
microsoft	microsoft_sql_server_2019	>= 15.0.0 < 15.0.4360.2	15.0.4360.2
microsoft	microsoft_sql_server_2022_for	>= 16.0.0 < 16.0.4120.1	16.0.4120.1
microsoft	sql_server_2019	>= 15.0.4003.23 < 15.0.4360.2	15.0.4360.2
microsoft	sql_server_2022	>= 16.0.4003.1 < 16.0.4120.1	16.0.4120.1
msrc	microsoft_sql_server_2019_for_x64-based_systems	—	—
msrc	microsoft_sql_server_2022_for_x64-based_systems	—	—

CWE-122