Microsoft · Security update · April 18, 2024

KB5035432: April 2024 security update

KB5035432, released April 18, 2024, fixes 37 CVEs in Microsoft SQL Server 2022 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0281

86th percentile

Priority of the 37 CVEs

Patch now 0
                                Urgent 0
                                High 37
                                Routine 0

Applies to

Product
Microsoft SQL Server 2022 for x64-based Systems (GDR)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
High	CVE-2024-28910	SQL Server	Remote Code Execution	8.8	0.0281	Exploitation Less Likely
High	CVE-2024-29985	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28906	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28909	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28931	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28932	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28933	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28934	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28936	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-29982	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-29983	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-29984	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-28929	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-28908	SQL Server	Remote Code Execution	8.8	0.0236	Exploitation Less Likely
High	CVE-2024-28930	SQL Server	Remote Code Execution	8.8	0.0236	Exploitation Less Likely
High	CVE-2024-28935	SQL Server	Remote Code Execution	8.8	0.0236	Exploitation Less Likely
High	CVE-2024-28914	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28927	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28940	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28942	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28943	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28944	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-29043	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-29044	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-29046	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely