Skip to content
OpenAdvisories
High · 8.8 CVE-2024-28908 EUVD-2024-25974GHSA-29x8-vr7f-rwm6

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Published Apr 9, 2024 · Updated May 3, 2025 · Assigned by microsoft

Description

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SQL Server 2019 (CU 25) 15.0.0 – < 15.0.4360.2 15.0.4360.2
Microsoft Microsoft SQL Server 2022 for (CU 12) 16.0.0 – < 16.0.4120.1 16.0.4120.1
Microsoft Microsoft SQL Server 2019 (GDR) 15.0.0 – < 15.0.2110.4 15.0.2110.4
Microsoft Microsoft SQL Server 2022 (GDR) 16.0.0 – < 16.0.1115.1 16.0.1115.1
Microsoft Microsoft OLE DB Driver 19 for SQL Server 19.0.0 – < 19.3.0003.0 19.3.0003.0
Microsoft Microsoft OLE DB Driver 18 for SQL Server 18.0.0 – < 18.7.0002.0 18.7.0002.0

Advisories 2

References