Microsoft · Security update · April 18, 2024
KB5037571: April 2024 security update
KB5037571, released April 18, 2024, fixes 13 CVEs in Microsoft ODBC Driver 18 for SQL Server on Windows. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.
HighUnsupported product
CVEs closed
13
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0242
84th percentile
Priority of the 13 CVEs
Patch now 0
Urgent 0
High 13
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2024-28931 | SQL Server | Remote Code Execution | 8.8 | 0.0242 | Exploitation Less Likely |
| High | CVE-2024-28932 | SQL Server | Remote Code Execution | 8.8 | 0.0242 | Exploitation Less Likely |
| High | CVE-2024-28933 | SQL Server | Remote Code Execution | 8.8 | 0.0242 | Exploitation Less Likely |
| High | CVE-2024-28934 | SQL Server | Remote Code Execution | 8.8 | 0.0242 | Exploitation Less Likely |
| High | CVE-2024-28936 | SQL Server | Remote Code Execution | 8.8 | 0.0242 | Exploitation Less Likely |
| High | CVE-2024-28929 | SQL Server | Remote Code Execution | 8.8 | 0.0240 | Exploitation Less Likely |
| High | CVE-2024-28930 | SQL Server | Remote Code Execution | 8.8 | 0.0236 | Exploitation Less Likely |
| High | CVE-2024-28935 | SQL Server | Remote Code Execution | 8.8 | 0.0236 | Exploitation Less Likely |
| High | CVE-2024-28943 | SQL Server | Remote Code Execution | 8.8 | 0.0235 | Exploitation Less Likely |
| High | CVE-2024-29043 | SQL Server | Remote Code Execution | 8.8 | 0.0235 | Exploitation Less Likely |
| High | CVE-2024-28937 | SQL Server | Remote Code Execution | 8.8 | 0.0233 | Exploitation Less Likely |
| High | CVE-2024-28938 | SQL Server | Remote Code Execution | 8.8 | 0.0233 | Exploitation Less Likely |
| High | CVE-2024-28941 | SQL Server | Remote Code Execution | 8.8 | 0.0226 | Exploitation Less Likely |
Showing 1 to 13 of 13
1