CVE-2023-36402

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36402 is fixed in 36 products on 1 platform, first by KB5032197, released November 14, 2023. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0179
78th percentile

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1607 for 32-bit Systems 14393.6452 KB5032197 Nov 14, 2023
Windows 10 Version 1607 for x64-based Systems 14393.6452 KB5032197 Nov 14, 2023
Windows 10 Version 1809 for 32-bit Systems 17763.5122 KB5032196 Nov 14, 2023
Windows 10 Version 1809 for ARM64-based Systems 17763.5122 KB5032196 Nov 14, 2023
Windows 10 Version 1809 for x64-based Systems 17763.5122 KB5032196 Nov 14, 2023
Windows 10 Version 21H2 for 32-bit Systems KB5032189 Nov 14, 2023
Windows 10 Version 21H2 for ARM64-based Systems KB5032189 Nov 14, 2023
Windows 10 Version 21H2 for x64-based Systems KB5032189 Nov 14, 2023
Windows 10 Version 22H2 for 32-bit Systems KB5032189 Nov 14, 2023
Windows 10 Version 22H2 for ARM64-based Systems KB5032189 Nov 14, 2023
Windows 10 Version 22H2 for x64-based Systems KB5032189 Nov 14, 2023
Windows 10 for 32-bit Systems 10240.20308 KB5032199 Nov 14, 2023
Windows 10 for x64-based Systems 10240.20308 KB5032199 Nov 14, 2023
Windows 11 Version 22H2 for ARM64-based Systems KB5032190 Nov 14, 2023
Windows 11 Version 22H2 for x64-based Systems KB5032190 Nov 14, 2023
Windows 11 Version 23H2 for ARM64-based Systems KB5032190 Nov 14, 2023
Windows 11 Version 23H2 for x64-based Systems KB5032190 Nov 14, 2023
Windows 11 version 21H2 for ARM64-based Systems 22000.2600 KB5032192 Nov 14, 2023
Windows 11 version 21H2 for x64-based Systems 22000.2600 KB5032192 Nov 14, 2023
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB5032252 Nov 14, 2023
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB5032250 Nov 14, 2023
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB5032252 Nov 14, 2023
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB5032250 Nov 14, 2023
Windows Server 2008 for 32-bit Systems Service Pack 2 KB5032254 Nov 14, 2023
Windows Server 2008 for 32-bit Systems Service Pack 2 KB5032248 Nov 14, 2023
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB5032254 Nov 14, 2023
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB5032248 Nov 14, 2023
Windows Server 2008 for x64-based Systems Service Pack 2 KB5032254 Nov 14, 2023
Windows Server 2008 for x64-based Systems Service Pack 2 KB5032248 Nov 14, 2023
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB5032254 Nov 14, 2023
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB5032248 Nov 14, 2023
Windows Server 2012 KB5032247 Nov 14, 2023
Windows Server 2012 (Server Core installation) KB5032247 Nov 14, 2023
Windows Server 2012 R2 KB5032249 Nov 14, 2023
Windows Server 2012 R2 (Server Core installation) KB5032249 Nov 14, 2023
Windows Server 2016 14393.6452 KB5032197 Nov 14, 2023
Windows Server 2016 (Server Core installation) 14393.6452 KB5032197 Nov 14, 2023
Windows Server 2019 17763.5122 KB5032196 Nov 14, 2023
Windows Server 2019 (Server Core installation) 17763.5122 KB5032196 Nov 14, 2023
Windows Server 2022 KB5032304 Nov 14, 2023
Windows Server 2022 20348.2113 KB5032198 Nov 14, 2023
Windows Server 2022 (Server Core installation) KB5032304 Nov 14, 2023
Windows Server 2022 (Server Core installation) 20348.2113 KB5032198 Nov 14, 2023
Windows Server 2022, 23H2 Edition (Server Core installation) 25398.531 KB5032202 Nov 14, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.