# KB5037573: April 2024 security update

KB5037573, released April 9, 2024, fixes 24 CVEs in Microsoft OLE DB Driver 19 for SQL Server. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5037573
- Platform: Microsoft
- Released: Apr 9, 2024
- Priority: High (Closes CVE-2024-28910, high severity)
- CVEs: 24, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://support.microsoft.com/help/5037573

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft OLE DB Driver 19 for SQL Server](https://patchblox.com/security/data/product/microsoft/microsoft-ole-db-driver-19-for-sql-server.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-28910](https://patchblox.com/security/data/cve/CVE-2024-28910.md) | High | SQL Server | 8.8 | 0.0281 |  |
| [CVE-2024-29985](https://patchblox.com/security/data/cve/CVE-2024-29985.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28906](https://patchblox.com/security/data/cve/CVE-2024-28906.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-28909](https://patchblox.com/security/data/cve/CVE-2024-28909.md) | High | SQL Server | 8.8 | 0.0242 |  |
| [CVE-2024-29982](https://patchblox.com/security/data/cve/CVE-2024-29982.md) | High | SQL Server | 8.8 | 0.0240 |  |
| [CVE-2024-29983](https://patchblox.com/security/data/cve/CVE-2024-29983.md) | High | SQL Server | 8.8 | 0.0240 |  |
| [CVE-2024-29984](https://patchblox.com/security/data/cve/CVE-2024-29984.md) | High | SQL Server | 8.8 | 0.0240 |  |
| [CVE-2024-28908](https://patchblox.com/security/data/cve/CVE-2024-28908.md) | High | SQL Server | 8.8 | 0.0236 |  |
| [CVE-2024-28914](https://patchblox.com/security/data/cve/CVE-2024-28914.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-28927](https://patchblox.com/security/data/cve/CVE-2024-28927.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-28940](https://patchblox.com/security/data/cve/CVE-2024-28940.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-28942](https://patchblox.com/security/data/cve/CVE-2024-28942.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-28944](https://patchblox.com/security/data/cve/CVE-2024-28944.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-29044](https://patchblox.com/security/data/cve/CVE-2024-29044.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-29046](https://patchblox.com/security/data/cve/CVE-2024-29046.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-29048](https://patchblox.com/security/data/cve/CVE-2024-29048.md) | High | SQL Server | 8.8 | 0.0235 |  |
| [CVE-2024-28913](https://patchblox.com/security/data/cve/CVE-2024-28913.md) | High | SQL Server | 8.8 | 0.0229 |  |
| [CVE-2024-28912](https://patchblox.com/security/data/cve/CVE-2024-28912.md) | High | SQL Server | 8.8 | 0.0227 |  |
| [CVE-2024-28926](https://patchblox.com/security/data/cve/CVE-2024-28926.md) | High | SQL Server | 8.8 | 0.0227 |  |
| [CVE-2024-28939](https://patchblox.com/security/data/cve/CVE-2024-28939.md) | High | SQL Server | 8.8 | 0.0227 |  |
| [CVE-2024-28945](https://patchblox.com/security/data/cve/CVE-2024-28945.md) | High | SQL Server | 8.8 | 0.0227 |  |
| [CVE-2024-28911](https://patchblox.com/security/data/cve/CVE-2024-28911.md) | High | SQL Server | 8.8 | 0.0221 |  |
| [CVE-2024-28915](https://patchblox.com/security/data/cve/CVE-2024-28915.md) | High | SQL Server | 8.8 | 0.0221 |  |
| [CVE-2024-29045](https://patchblox.com/security/data/cve/CVE-2024-29045.md) | High | SQL Server | 7.5 | 0.0178 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo