Known vulnerabilities in Microsoft SQL Server 2022 CU12

Vendor: Microsoft
Version: 2022 CU12
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft SQL Server version 2022 CU12 Microsoft SQL Server 2022 CU12 is affected by 38 vulnerabilities: 38 high Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88315 - Integer underflow
CVE-2024-28933
CWE-191 High
No
No
- 09.04.2024 SB2024040976
#VU88314 - Integer underflow
CVE-2024-28930
CWE-191 High
No
No
- 09.04.2024 SB2024040976
#VU88312 - Heap-based Buffer Overflow
CVE-2024-28932
CWE-122 High
No
No
- 09.04.2024 SB2024040976
#VU88308 - Heap-based Buffer Overflow
CVE-2024-28943
CWE-122 High
No
No
- 09.04.2024 SB2024040976
#VU88306 - Heap-based Buffer Overflow
CVE-2024-28937
CWE-122 High
No
No
- 09.04.2024 SB2024040976
#VU88288 - Integer overflow
CVE-2024-28929
CWE-190 High
No
No
- 09.04.2024 SB2024040976
#VU88287 - Integer overflow
CVE-2024-28931
CWE-190 High
No
No
- 09.04.2024 SB2024040976
#VU88284 - Integer overflow
CVE-2024-28936
CWE-190 High
No
No
- 09.04.2024 SB2024040976
#VU88282 - Heap-based Buffer Overflow
CVE-2024-28935
CWE-122 High
No
No
- 09.04.2024 SB2024040976
#VU88281 - Use After Free
CVE-2024-29043
CWE-416 High
No
No
- 09.04.2024 SB2024040976
#VU88280 - Heap-based Buffer Overflow
CVE-2024-28941
CWE-122 High
No
No
- 09.04.2024 SB2024040976
#VU88279 - Out-of-bounds read
CVE-2024-28938
CWE-125 High
No
No
- 09.04.2024 SB2024040976
#VU88278 - Stack-based buffer overflow
CVE-2024-28934
CWE-121 High
No
No
- 09.04.2024 SB2024040976
#VU88268 - Improper input validation
CVE-2024-29045
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88255 - Improper input validation
CVE-2024-28944
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88254 - Improper input validation
CVE-2024-28909
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88253 - Improper input validation
CVE-2024-28912
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88252 - Improper input validation
CVE-2024-28915
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88251 - Improper input validation
CVE-2024-28913
CWE-20 High
No
No
- 09.04.2024 SB2024040964
#VU88250 - Improper input validation
CVE-2024-29044
CWE-20 High
No
No
- 09.04.2024 SB2024040964


Showing elements 1 - 20 out of 38