Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-36417

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Description

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft SQL Server 2019 (GDR)

  • 15.0.0 to < 15.0.2104.1affected

Microsoft Microsoft SQL Server 2022 (GDR)

  • 16.0.0 to < 16.0.1105.1affected

Microsoft Microsoft OLE DB Driver 19 for SQL Server

  • 19.0.0 to < 19.3.0002.0affected

Microsoft Microsoft OLE DB Driver 18 for SQL Server

  • 18.0.0 to < 18.6.0007.0affected

Microsoft Microsoft SQL Server 2022 (CU 8)

  • 15.0.0 to < 16.0.4080.1affected

Microsoft Microsoft SQL Server 2019 (CU 22)

  • 15.0.0 to < 15.0.4326.1affected

References