8.7
High
CVE-2024-0056 Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
Description
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft SQL Server 2022 (GDR) 16.0 | 16.0.0 → < 16.0.1110.1 | 16.0.1110.1 |
| .NET 6.0 6.0 | 6.0.0 → < 6.0.26 | 6.0.26 |
| .NET 7.0 7.0 | 7.0.0 → < 7.0.15 | 7.0.15 |
| .NET 8.0 8.0 | 8.0 → < 8.0.1 | 8.0.1 |
| Microsoft.Data.SqlClient 5.0 | 5.0 → < 5.1.3 | 5.1.3 |
| System.Data.SqlClient 1.0 | 1.0 → < 4.8.6 | 4.8.6 |
| Microsoft Visual Studio 2022 version 17.2 17.2 | 17.2.0 → < 17.2.23 | 17.2.23 |
| Microsoft Visual Studio 2022 version 17.4 17.4 | 17.4.0 → < 17.4.15 | 17.4.15 |
| Microsoft Visual Studio 2022 version 17.6 17.6 | 17.6.0 → < 17.6.11 | 17.6.11 |
Show the 8 other branches Hide the 8 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.8 17.8 | 17.8.0 → < 17.8.4 | 17.8.4 |
| Microsoft SQL Server 2022 (CU 10) 16.0 | earliest → < 16.0.4100.1 | 16.0.4100.1 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.04690.02 | 4.8.04690.02 |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → < 4.8.04690.02 | 4.8.04690.02 |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → < 4.7.04081.03 | 4.7.04081.03 |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.04081.02 | 4.7.04081.02 |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → < 4.8.09214.01 | 4.8.09214.01 |
| Microsoft .NET Framework 2.0 Service Pack 2 2.0 | 2.0.0 → < 3.0.50727.8976 | 3.0.50727.8976 |
References
Timeline
- Published
- Last modified
Other CVEs of Microsoft SQL Server 2022 (GDR)
The 196 CVEs of Microsoft SQL Server 2022 (GDR) →
CVE-2026-94512
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network
8.8
High
CVE-2026-94520
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network
4.9
Medium
CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
6.4
Medium
CVE-2026-88086
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network
5.3
Medium