# KB5037571: April 2024 security update

KB5037571, released April 18, 2024, fixes 13 CVEs in Microsoft ODBC Driver 18 for SQL Server on Windows. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5037571
- Platform: Microsoft
- Released: Apr 18, 2024
- Priority: High (Closes CVE-2024-28936, high severity)
- CVEs: 13, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://support.microsoft.com/help/5037571

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft ODBC Driver 18 for SQL Server on Windows](https://patchblox.com/security/data/product/microsoft/microsoft-odbc-driver-18-for-sql-server-on-windows.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-28931](https://patchblox.com/security/data/cve/CVE-2024-28931.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28932](https://patchblox.com/security/data/cve/CVE-2024-28932.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28933](https://patchblox.com/security/data/cve/CVE-2024-28933.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28934](https://patchblox.com/security/data/cve/CVE-2024-28934.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28936](https://patchblox.com/security/data/cve/CVE-2024-28936.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28929](https://patchblox.com/security/data/cve/CVE-2024-28929.md) | High | SQL Server | 8.8 | 0.0240 |  |
| [CVE-2024-28930](https://patchblox.com/security/data/cve/CVE-2024-28930.md) | High | SQL Server | 8.8 | 0.0236 |  |
| [CVE-2024-28935](https://patchblox.com/security/data/cve/CVE-2024-28935.md) | High | SQL Server | 8.8 | 0.0236 |  |
| [CVE-2024-28943](https://patchblox.com/security/data/cve/CVE-2024-28943.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-29043](https://patchblox.com/security/data/cve/CVE-2024-29043.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-28937](https://patchblox.com/security/data/cve/CVE-2024-28937.md) | High | SQL Server | 8.8 | 0.0233 |  |
| [CVE-2024-28938](https://patchblox.com/security/data/cve/CVE-2024-28938.md) | High | SQL Server | 8.8 | 0.0233 |  |
| [CVE-2024-28941](https://patchblox.com/security/data/cve/CVE-2024-28941.md) | High | SQL Server | 8.8 | 0.0226 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo