Skip to content
fr Sign in
8.8 High

CVE-2024-28932 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Description

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Affected products and versions

Product Affected versions Fixed in
Microsoft SQL Server 2022 for (CU 12) 16.0 16.0.0 → < 16.0.4120.1 16.0.4120.1
Microsoft SQL Server 2019 (CU 25) 15.0 15.0.0 → < 15.0.4360.2 15.0.4360.2
Microsoft SQL Server 2019 (GDR) 15.0 15.0.0 → < 15.0.2110.4 15.0.2110.4
Microsoft SQL Server 2022 (GDR) 16.0 16.0.0 → < 16.0.1115.1 16.0.1115.1
Microsoft ODBC Driver 17 for SQL Server on Windows 17.0 17.0.0.0 → < 17.10.6.1 17.10.6.1
Microsoft ODBC Driver 17 for SQL Server on Linux 17.0 17.0.0.0 → < 17.10.6.1 17.10.6.1
Microsoft ODBC Driver 17 for SQL Server on MacOS 17.0 17.0.0.0 → < 17.10.6.1 17.10.6.1
Microsoft ODBC Driver 18 for SQL Server on Windows 18.0 18.0.0.0 → < 18.3.3.1 18.3.3.1
Microsoft ODBC Driver 18 for SQL Server on Linux 18.0 18.0.0.0 → < 18.3.3.1 18.3.3.1
Show the 6 other branches
Product Affected versions Fixed in
Microsoft ODBC Driver 18 for SQL Server on MacOS 18.0 18.0.0.0 → < 18.3.3.1 18.3.3.1
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11 16.11.0 → < 16.11.35 16.11.35
Microsoft Visual Studio 2022 version 17.9 17.0 17.0 → < 17.9.6 17.9.6
Microsoft Visual Studio 2022 version 17.4 17.4 17.4.0 → < 17.4.18 17.4.18
Microsoft Visual Studio 2022 version 17.6 17.6 17.6.0 → < 17.6.14 17.6.14
Microsoft Visual Studio 2022 version 17.8 17.8 17.8.0 → < 17.8.9 17.8.9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft SQL Server 2022 for (CU 12)

The 38 CVEs of Microsoft SQL Server 2022 for (CU 12) →
CVE-2024-29985 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High CVE-2024-29984 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High CVE-2024-29983 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High CVE-2024-29982 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High
Track this CVE