Microsoft · Security update · April 18, 2024

KB5037570: April 2024 security update

KB5037570, released April 18, 2024, fixes 13 CVEs in Microsoft ODBC Driver 17 for SQL Server on Windows. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
13
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0242
84th percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 13 Routine 0

Applies to

Product
Microsoft ODBC Driver 17 for SQL Server on Windows

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-28931 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28932 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28933 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28934 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28936 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28929 SQL ServerRemote Code Execution8.8 0.0240 Exploitation Less Likely
High CVE-2024-28930 SQL ServerRemote Code Execution8.8 0.0236 Exploitation Less Likely
High CVE-2024-28935 SQL ServerRemote Code Execution8.8 0.0236 Exploitation Less Likely
High CVE-2024-28943 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-29043 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-28937 SQL ServerRemote Code Execution8.8 0.0233 Exploitation Less Likely
High CVE-2024-28938 SQL ServerRemote Code Execution8.8 0.0233 Exploitation Less Likely
High CVE-2024-28941 SQL ServerRemote Code Execution8.8 0.0226 Exploitation Less Likely
Showing 1 to 13 of 13 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.