Known vulnerabilities in Microsoft SQL Server - page 3

Vendor: Microsoft
Software: Microsoft SQL Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sql_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 180
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SQL Server Microsoft SQL Server is affected by 180 known vulnerabilities: 4 critical, 127 high, 38 medium, 11 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100289 - Use After Free
CVE-2024-49003		 CWE-416 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100288 - Heap-based Buffer Overflow
CVE-2024-49008		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100287 - Heap-based Buffer Overflow
CVE-2024-38255		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100286 - Heap-based Buffer Overflow
CVE-2024-48993		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100285 - Heap-based Buffer Overflow
CVE-2024-49002		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100284 - Use After Free
CVE-2024-49016		 CWE-416 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100283 - Heap-based Buffer Overflow
CVE-2024-49000		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100282 - Heap-based Buffer Overflow
CVE-2024-49005		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100281 - Heap-based Buffer Overflow
CVE-2024-49013		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100280 - Double Free
CVE-2024-49014		 CWE-415 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100279 - Numeric Truncation Error
CVE-2024-49018		 CWE-197 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100278 - Heap-based Buffer Overflow
CVE-2024-49011		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100277 - Use After Free
CVE-2024-43459		 CWE-416 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100275 - Heap-based Buffer Overflow
CVE-2024-49012		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100274 - Heap-based Buffer Overflow
CVE-2024-48997		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU100273 - Heap-based Buffer Overflow
CVE-2024-43462		 CWE-122 High
No
No
 13.0.6455.2 13.0.6455.2, 13.0.7050.2 13.0.7050.2, 14.0.2070.1 14.0.2070.1, 14.0.3485.1 14.0.3485.1, 15.0.2130.3 15.0.2130.3 12.11.2024 SB20241112110
#VU97050 - Out-of-bounds read
CVE-2024-37342		 CWE-125 Low
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97049 - Untrusted Pointer Dereference
CVE-2024-37340		 CWE-822 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97048 - Numeric Truncation Error
CVE-2024-37337		 CWE-197 Medium
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114
#VU97042 - Out-of-bounds read
CVE-2024-37966		 CWE-125 Low
No
No
 14.0.2060.1 14.0.2060.1, 14.0.3475.1 14.0.3475.1, 15.0.2120.1 15.0.2120.1, 16.0.1125.1 16.0.1125.1 10.09.2024 SB20240910114


Showing elements 41 - 60 out of 180