Microsoft · Security update · April 18, 2024

KB5036335: April 2024 security update

KB5036335, released April 18, 2024, fixes 38 CVEs in Microsoft SQL Server 2019 for x64-based Systems (CU 25). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0281

86th percentile

Priority of the 38 CVEs

Patch now 0
                                Urgent 0
                                High 38
                                Routine 0

Applies to

Product
Microsoft SQL Server 2019 for x64-based Systems (CU 25)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
High	CVE-2024-28910	SQL Server	Remote Code Execution	8.8	0.0281	Exploitation Less Likely
High	CVE-2024-29985	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28906	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28909	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28931	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28932	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28933	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28934	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-28936	SQL Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2024-29982	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-29983	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-29984	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-28929	SQL Server	Remote Code Execution	8.8	0.0240	Exploitation Less Likely
High	CVE-2024-28908	SQL Server	Remote Code Execution	8.8	0.0236	Exploitation Less Likely
High	CVE-2024-28930	SQL Server	Remote Code Execution	8.8	0.0236	Exploitation Less Likely
High	CVE-2024-28935	SQL Server	Remote Code Execution	8.8	0.0236	Exploitation Less Likely
High	CVE-2024-28914	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28927	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28940	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28942	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28943	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-28944	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-29043	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-29044	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely
High	CVE-2024-29046	SQL Server	Remote Code Execution	8.8	0.0235	Exploitation Less Likely