High · 8.8 CVE-2024-37340 EUVD-2024-36941GHSA-mhc8-f455-fqc9

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

Published Sep 10, 2024 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft SQL Server 2017 (CU 31) Product: Microsoft SQL Server 2017 (GDR) Product: Microsoft SQL Server 2019 (CU 28) Product: Microsoft SQL Server 2019 (GDR) Product: Microsoft SQL Server 2022 (GDR) Product: Microsoft SQL Server 2022 for (CU 14)

Description

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft SQL Server 2017 (CU 31)	14.0.0 – < 14.0.3475.1	14.0.3475.1
Microsoft	Microsoft SQL Server 2017 (GDR)	14.0.0 – < 14.0.2060.1	14.0.2060.1
Microsoft	Microsoft SQL Server 2019 (CU 28)	15.0.0 – < 15.0.4390.2	15.0.4390.2
Microsoft	Microsoft SQL Server 2019 (GDR)	15.0.0 – < 15.0.2120.1	15.0.2120.1
Microsoft	Microsoft SQL Server 2022 (GDR)	16.0.0 – < 16.0.1125.1	16.0.1125.1
Microsoft	Microsoft SQL Server 2022 for (CU 14)	16.0.0 – < 16.0.4140.3	16.0.4140.3

Advisories 3

WID-SEC-2024-2119 Microsoft SQL Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 10, 2024
NCSC-2024-0364 Kwetsbaarheden verholpen in Microsoft SQL Server NCSC-NL (Netherlands) · Sep 10, 2024
MSRC-CVE-2024-37340 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft Security Response Center · Sep 10, 2024

References

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability vendor-advisory patch