Known vulnerabilities in Microsoft ODBC Driver for SQL Server on Windows
Vendor:
Microsoft
Software CPE:
cpe:2.3:a:microsoft:odbc_driver_windows:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
25
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
17.11.1.1
18.6.2.1
18.6.1.1
18.5.2.1
18.5.1.1
18.4.1.1
18.3.3.1
17.10.6.1
18.6.0007.0
18.3.2.1
17.10.5.1
17.0
18.0
18.3.1.1
13.0.4414.46
13.0.811.168
12.0.5543.11
17.3.1.1
18.2.2.1
18.2.1.1
18.1.2.1
18.1.1.1
18.0.1.1
17.10.4.1
17.10.3.1
17.10.2.1
17.10.1.1
17.9.1.1
17.8.1.1
17.7.2.1
17.7.1.1
17.6.1.1
17.5.2.1
17.5.1.1
17.4.2.1
17.4.1.1
17.3.0.1
17.2.0.1
17.1.0.1
17.0.1.1
13.1
13
11
17
18
Vulnerabilities (25)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88315 - Integer underflow CVE-2024-28933 |
CWE-191 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88314 - Integer underflow CVE-2024-28930 |
CWE-191 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88312 - Heap-based Buffer Overflow CVE-2024-28932 |
CWE-122 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88308 - Heap-based Buffer Overflow CVE-2024-28943 |
CWE-122 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88306 - Heap-based Buffer Overflow CVE-2024-28937 |
CWE-122 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88288 - Integer overflow CVE-2024-28929 |
CWE-190 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88287 - Integer overflow CVE-2024-28931 |
CWE-190 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88284 - Integer overflow CVE-2024-28936 |
CWE-190 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88282 - Heap-based Buffer Overflow CVE-2024-28935 |
CWE-122 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88281 - Use After Free CVE-2024-29043 |
CWE-416 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88280 - Heap-based Buffer Overflow CVE-2024-28941 |
CWE-122 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88279 - Out-of-bounds read CVE-2024-28938 |
CWE-125 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU88278 - Stack-based buffer overflow CVE-2024-28934 |
CWE-121 | High | - | 09.04.2024 |
SB2024040976 |
||
| #VU81827 - Improper input validation CVE-2023-36728 |
CWE-20 | Low | 18.6.0007.0 | 10.10.2023 |
SB2023101090 SB2024041517 |
||
| #VU81802 - Improper input validation CVE-2023-36785 |
CWE-20 | High | 17.10.5.1, 18.6.0007.0 | 10.10.2023 |
SB2023101083 SB2024041517 SB2025012461 |
||
| #VU81801 - Improper input validation CVE-2023-36730 |
CWE-20 | High | 17.10.5.1, 18.6.0007.0 | 10.10.2023 |
SB2023101083 SB2024041517 |
||
| #VU81798 - Improper input validation CVE-2023-36420 |
CWE-20 | Medium | 17.10.5.1, 18.6.0007.0 | 10.10.2023 |
SB2023101083 SB2024041517 |
||
| #VU79153 - Improper input validation CVE-2023-38169 |
CWE-20 | High | 18.2.2.1 2018.182.2.1, 18.3.1.1 | 08.08.2023 |
SB2023080869 SB2024041517 |
||
| #VU77449 - Improper input validation CVE-2023-29349 |
CWE-20 | High | 17.10.4.1 2017.1710.4.1, 18.2.2.1 2018.182.2.1 | 15.06.2023 |
SB2023061536 SB2024041517 |
||
| #VU77444 - Improper input validation CVE-2023-32025 |
CWE-20 | High | 17.10.4.1 2017.1710.4.1, 18.2.2.1 2018.182.2.1 | 15.06.2023 |
SB2023061534 SB2024041517 |
Showing elements 1 - 20 out of 25