VYPR
High severity8.8NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2024-28926

CVE-2024-28926

Description

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Affected products

10
  • cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*range: >=18.0.2,<18.7.0002.0
    • (no CPE)
    • (no CPE)range: 18.0.0
    • (no CPE)range: 19.0.0
  • cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*range: >=15.0.2000.5,<15.0.2110.4
    • cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*range: >=16.0.1000.6,<16.0.1115.1
  • Microsoft/Microsoft SQL Server 2019 (CU 25)v5
    Range: 15.0.0
  • Microsoft/Microsoft SQL Server 2019 (GDR)v5
    Range: 15.0.0
  • Microsoft/Microsoft SQL Server 2022 (GDR)v5
    Range: 16.0.0
  • Microsoft/Microsoft SQL Server 2022 for (CU 12)v5
    Range: 16.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.