cbcvebase.

Microsoft Sql Server 2022 vulnerabilities

166 known vulnerabilities affecting microsoft/sql_server_2022.

Total CVEs
166
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL8HIGH133MEDIUM25

Vulnerabilities

Page 4 of 9
CVE-2024-37331P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-37331 [HIGH] CWE-122 CVE-2024-37331: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-35271P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-35271 [HIGH] CWE-122 CVE-2024-35271: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21333P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21333 [HIGH] CWE-122 CVE-2024-21333: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21415P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21415 [HIGH] CWE-122 CVE-2024-21415: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21428P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21428 [HIGH] CWE-190 CVE-2024-21428: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21373P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21373 [HIGH] CWE-122 CVE-2024-21373: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21332P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21332 [HIGH] CWE-416 CVE-2024-21332: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21335P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21335 [HIGH] CWE-122 CVE-2024-21335: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2026-20803P3HIGHCVSS 7.2≥ 16.0.1000.6, < 16.0.1165.1≥ 16.0.4003.1, < 16.0.4230.22026-01-13
CVE-2026-20803 [HIGH] CWE-306 CVE-2026-20803: Missing authentication for critical function in SQL Server allows an authorized attacker to elevate Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-28910P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1115.1≥ 16.0.4003.1, < 16.0.4120.12024-04-09
CVE-2024-28910 [HIGH] CWE-122 CVE-2024-28910: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-38087P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-38087 [HIGH] CWE-415 CVE-2024-38087: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-38088P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-38088 [HIGH] CWE-122 CVE-2024-38088: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37336P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-37336 [HIGH] CWE-190 CVE-2024-37336: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21308P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21308 [HIGH] CWE-416 CVE-2024-21308: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37327P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-37327 [HIGH] CWE-122 CVE-2024-37327: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37322P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-37322 [HIGH] CWE-122 CVE-2024-37322: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-37319P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-37319 [HIGH] CWE-122 CVE-2024-37319: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21317P3HIGHCVSS 8.8≥ 16.0.1000.6, < 16.0.1121.4≥ 16.0.4003.1, < 16.0.4131.22024-07-09
CVE-2024-21317 [HIGH] CWE-122 CVE-2024-21317: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-21449P3HIGHCVSS 8.8fixed in 16.0.1121.4≥ 16.0.4125.3, < 16.0.4131.22024-07-09
CVE-2024-21449 [HIGH] CWE-122 CVE-2024-21449: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
CVE-2024-20701P3HIGHCVSS 8.8v16.0.1121.4v16.0.4131.22024-07-09
CVE-2024-20701 [HIGH] CWE-122 CVE-2024-20701: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
nvd
Microsoft Sql Server 2022 vulnerabilities | cvebase