# KB5040946: July 2024 security update KB5040946, released July 9, 2024, fixes 37 CVEs in Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5040946 - Platform: Microsoft - Released: Jul 9, 2024 - Priority: High (Closes CVE-2024-37332, high severity) - CVEs: 37, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5040946 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)](https://patchblox.com/security/data/product/microsoft/microsoft-sql-server-2016-for-x64-based-systems-service-pack-3-gdr.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-21398](https://patchblox.com/security/data/cve/CVE-2024-21398.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-21414](https://patchblox.com/security/data/cve/CVE-2024-21414.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-35271](https://patchblox.com/security/data/cve/CVE-2024-35271.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-35272](https://patchblox.com/security/data/cve/CVE-2024-35272.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-37318](https://patchblox.com/security/data/cve/CVE-2024-37318.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-37331](https://patchblox.com/security/data/cve/CVE-2024-37331.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-37332](https://patchblox.com/security/data/cve/CVE-2024-37332.md) | High | SQL Server | 8.8 | 0.0185 | | | [CVE-2024-21332](https://patchblox.com/security/data/cve/CVE-2024-21332.md) | High | SQL Server | 8.8 | 0.0179 | | | [CVE-2024-21333](https://patchblox.com/security/data/cve/CVE-2024-21333.md) | High | SQL Server | 8.8 | 0.0179 | | | [CVE-2024-21335](https://patchblox.com/security/data/cve/CVE-2024-21335.md) | High | SQL Server | 8.8 | 0.0179 | | | [CVE-2024-21373](https://patchblox.com/security/data/cve/CVE-2024-21373.md) | High | SQL Server | 8.8 | 0.0179 | | | [CVE-2024-21415](https://patchblox.com/security/data/cve/CVE-2024-21415.md) | High | SQL Server | 8.8 | 0.0179 | | | [CVE-2024-21428](https://patchblox.com/security/data/cve/CVE-2024-21428.md) | High | SQL Server | 8.8 | 0.0179 | | | [CVE-2024-38087](https://patchblox.com/security/data/cve/CVE-2024-38087.md) | High | SQL Server | 8.8 | 0.0168 | | | [CVE-2024-38088](https://patchblox.com/security/data/cve/CVE-2024-38088.md) | High | SQL Server | 8.8 | 0.0168 | | | [CVE-2024-37336](https://patchblox.com/security/data/cve/CVE-2024-37336.md) | High | SQL Server | 8.8 | 0.0168 | | | [CVE-2024-20701](https://patchblox.com/security/data/cve/CVE-2024-20701.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-21308](https://patchblox.com/security/data/cve/CVE-2024-21308.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-21317](https://patchblox.com/security/data/cve/CVE-2024-21317.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-21331](https://patchblox.com/security/data/cve/CVE-2024-21331.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-21425](https://patchblox.com/security/data/cve/CVE-2024-21425.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-21449](https://patchblox.com/security/data/cve/CVE-2024-21449.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-28928](https://patchblox.com/security/data/cve/CVE-2024-28928.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-37319](https://patchblox.com/security/data/cve/CVE-2024-37319.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-37322](https://patchblox.com/security/data/cve/CVE-2024-37322.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-37323](https://patchblox.com/security/data/cve/CVE-2024-37323.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-37326](https://patchblox.com/security/data/cve/CVE-2024-37326.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-37327](https://patchblox.com/security/data/cve/CVE-2024-37327.md) | High | SQL Server | 8.8 | 0.0161 | | | [CVE-2024-35256](https://patchblox.com/security/data/cve/CVE-2024-35256.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37320](https://patchblox.com/security/data/cve/CVE-2024-37320.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37321](https://patchblox.com/security/data/cve/CVE-2024-37321.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37324](https://patchblox.com/security/data/cve/CVE-2024-37324.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37328](https://patchblox.com/security/data/cve/CVE-2024-37328.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37329](https://patchblox.com/security/data/cve/CVE-2024-37329.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37330](https://patchblox.com/security/data/cve/CVE-2024-37330.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-37333](https://patchblox.com/security/data/cve/CVE-2024-37333.md) | High | SQL Server | 8.8 | 0.0155 | | | [CVE-2024-21303](https://patchblox.com/security/data/cve/CVE-2024-21303.md) | High | SQL Server | 8.8 | 0.0149 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo