A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMicrosoft SQL Server
OSMicrosoft20162017
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCEMemory
CWE
Related vulnerabilities
CVE-2020-0618HIGH8.8⚠ KEVsame product
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly ha...
CVE-2019-1068HIGH8.8⚠ KEVsame product
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of...
CVE-2012-1856HIGH8.8⚠ KEVsame product
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 ...
CVE-2024-0056HIGH8.7same product
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2023-36417HIGH7.8same product
Microsoft SQL OLE DB Remote Code Execution Vulnerability