rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-28914 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft OLE DB Driver 19 for SQL Server
vendor: Microsoft
product: Microsoft OLE DB Driver 18 for SQL Server
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:25.876Z
CVE-2024-28915 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft OLE DB Driver 19 for SQL Server
vendor: Microsoft
product: Microsoft OLE DB Driver 18 for SQL Server
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:26.477Z
CVE-2024-28916 Xbox Gaming Services Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Microsoft
product: Xbox Gaming Services
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2024-03-20T23:31:17.082Z
CVE-2024-28917 Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Microsoft
product: Azure Arc Extension
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.2
vectorString: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:11.746Z
CVE-2024-28919 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:17.638Z
CVE-2024-28920 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:15.987Z
CVE-2024-28921 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:17.099Z
CVE-2024-28922 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:16.545Z
CVE-2024-28923 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.4
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:18.197Z
CVE-2024-28924 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:08.345Z
CVE-2024-28925 Secure Boot Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows Server 2022
vendor: Microsoft
product: Windows 11 version 21H2
vendor: Microsoft
product: Windows 10 Version 21H2
vendor: Microsoft
product: Windows 11 version 22H2
vendor: Microsoft
product: Windows 10 Version 22H2
vendor: Microsoft
product: Windows 11 version 22H3
vendor: Microsoft
product: Windows 11 Version 23H2
vendor: Microsoft
product: Windows Server 2022, 23H2 Edition (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:08.970Z
CVE-2024-28926 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft OLE DB Driver 19 for SQL Server
vendor: Microsoft
product: Microsoft OLE DB Driver 18 for SQL Server
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:12.323Z
CVE-2024-28927 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft OLE DB Driver 19 for SQL Server
vendor: Microsoft
product: Microsoft OLE DB Driver 18 for SQL Server
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:12.876Z
CVE-2024-28928 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2017 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2016 Service Pack 3 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
vendor: Microsoft
product: Microsoft SQL Server 2017 (CU 31)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 13)
vendor: Microsoft
product: Microsoft SQL Server 2019 for x64-based Systems (CU 27)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-07-09T17:02:57.132Z
CVE-2024-28929 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.9
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:27.042Z
CVE-2024-28930 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-191
description: CWE-191: Integer Underflow (Wrap or Wraparound)
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.9
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:13.416Z
CVE-2024-28931 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.9
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:27.649Z
CVE-2024-28932 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.9
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:00:28.215Z
CVE-2024-28933 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-191
description: CWE-191: Integer Underflow (Wrap or Wraparound)
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.9
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:13.955Z
CVE-2024-28934 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2022 for (CU 12)
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 25)
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.9
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2024-04-09T17:01:14.516Z