VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-36785

CVE-2023-36785

Description

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Affected products

16
  • Microsoft/Microsoft SQL Server 2019 (GDR)v5
    Range: 15.0.0
  • Microsoft/Microsoft SQL Server 2022 (GDR)v5
    Range: 16.0.0
  • Microsoft/Microsoft ODBC Driver 17 for SQL Server on Windowsv5
    Range: 17.0.0.0
  • Microsoft/Microsoft ODBC Driver 17 for SQL Server on Linuxv5
    Range: 17.0.0.0
  • Microsoft/Microsoft ODBC Driver 17 for SQL Server on MacOSv5
    Range: 17.0.0.0
  • Microsoft/Microsoft ODBC Driver 18 for SQL Server on Windowsv5
    Range: 18.0.0.0
  • Microsoft/Microsoft ODBC Driver 18 for SQL Server on Linuxv5
    Range: 18.0.0.0
  • Microsoft/Microsoft ODBC Driver 18 for SQL Server on MacOSv5
    Range: 18.0.0.0
  • Microsoft/Microsoft SQL Server 2019 (CU 22)v5
    Range: 15.0.0
  • Microsoft/Microsoft SQL Server 2022 (CU 8)v5
    Range: 15.0.0
  • Microsoft/Odbc Driver For SQL Serverllm-fuzzy4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:microsoft:odbc_driver_for_sql_server:*:*:*:*:*:linux:*:*range: >=17.0.1.1,<17.10.5.1
    • cpe:2.3:a:microsoft:odbc_driver_for_sql_server:*:*:*:*:*:macos:*:*range: >=17.0.1.1,<17.10.5.1
    • cpe:2.3:a:microsoft:odbc_driver_for_sql_server:*:*:*:*:*:windows:*:*range: >=17.0.1.1,<17.10.5.1
  • Microsoft/SQL Server2 versions
    cpe:2.3:a:microsoft:sql_server:2019:cumulative_update_22:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:sql_server:2019:cumulative_update_22:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2022:cumulative_update_8:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.