CVE-2024-26161 | THREATINT

Assigner	microsoft
Reserved	2024-02-14
Published	2024-03-12
Updated	2024-08-01

Description

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

HIGH: 8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Product status

10.0.0 before 10.0.17763.5576

affected

10.0.0 before 10.0.17763.5576

affected

10.0.0 before 10.0.17763.5576

affected

10.0.0 before 10.0.20348.2340

affected

10.0.0 before 10.0.20348.2333

affected

10.0.0 before 10.0.22000.2836

affected

10.0.0 before 10.0.19044.4170

affected

10.0.0 before 10.0.22621.3296

affected

10.0.0 before 10.0.19045.4170

affected

10.0.0 before 10.0.22631.3296

affected

10.0.0 before 10.0.22631.3296

affected

10.0.0 before 10.0.25398.763

affected

10.0.0 before 10.0.10240.20526

affected

10.0.0 before 10.0.14393.6796

affected

10.0.0 before 10.0.14393.6796

affected

10.0.0 before 10.0.14393.6796

affected

6.0.0 before 6.0.6003.22567

affected

6.0.0 before 6.0.6003.22567

affected

6.0.0 before 6.0.6003.22567

affected

6.1.0 before 6.1.7601.27017

affected

6.0.0 before 6.1.7601.27017

affected

6.2.0 before 6.2.9200.24768

affected

6.2.0 before 6.2.9200.24768

affected

6.3.0 before 6.3.9600.21871

affected

6.3.0 before 6.3.9600.21871

affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26161 (Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability) vendor-advisory

cve.org CVE-2024-26161

nvd.nist.gov CVE-2024-26161

Download JSON