High severity8.8NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026
CVE-2024-28915
CVE-2024-28915
Description
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
Affected products
10cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*range: >=18.0.2,<18.7.0002.0
- (no CPE)
- (no CPE)range: 18.0.0
- (no CPE)range: 19.0.0
cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*range: >=15.0.2000.5,<15.0.2110.4
- cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*range: >=16.0.1000.6,<16.0.1115.1
- Microsoft/Microsoft SQL Server 2019 (CU 25)v5Range: 15.0.0
- Microsoft/Microsoft SQL Server 2019 (GDR)v5Range: 15.0.0
- Microsoft/Microsoft SQL Server 2022 (GDR)v5Range: 16.0.0
- Microsoft/Microsoft SQL Server 2022 for (CU 12)v5Range: 16.0.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28915nvdVendor Advisory
News mentions
0No linked articles in our index yet.