Microsoft · Security update · April 9, 2024

KB5037572: April 2024 security update

KB5037572, released April 9, 2024, fixes 24 CVEs in Microsoft OLE DB Driver 18 for SQL Server. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
24
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0281
86th percentile

Priority of the 24 CVEs

Patch now 0 Urgent 0 High 24 Routine 0

Applies to

Product
Microsoft OLE DB Driver 18 for SQL Server

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-28910 SQL ServerRemote Code Execution8.8 0.0281 Exploitation Less Likely
High CVE-2024-29985 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28906 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-28909 SQL ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2024-29982 SQL ServerRemote Code Execution8.8 0.0240 Exploitation Less Likely
High CVE-2024-29983 SQL ServerRemote Code Execution8.8 0.0240 Exploitation Less Likely
High CVE-2024-29984 SQL ServerRemote Code Execution8.8 0.0240 Exploitation Less Likely
High CVE-2024-28908 SQL ServerRemote Code Execution8.8 0.0236 Exploitation Less Likely
High CVE-2024-28914 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-28927 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-28940 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-28942 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-28944 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-29044 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-29046 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-29048 SQL ServerRemote Code Execution8.8 0.0235 Exploitation Less Likely
High CVE-2024-28913 SQL ServerRemote Code Execution8.8 0.0229 Exploitation Less Likely
High CVE-2024-28912 SQL ServerRemote Code Execution8.8 0.0227 Exploitation Less Likely
High CVE-2024-28926 SQL ServerRemote Code Execution8.8 0.0227 Exploitation Less Likely
High CVE-2024-28939 SQL ServerRemote Code Execution8.8 0.0227 Exploitation Less Likely
High CVE-2024-28945 SQL ServerRemote Code Execution8.8 0.0227 Exploitation Less Likely
High CVE-2024-28911 SQL ServerRemote Code Execution8.8 0.0221 Exploitation Less Likely
High CVE-2024-28915 SQL ServerRemote Code Execution8.8 0.0221 Exploitation Less Likely
High CVE-2024-29045 SQL ServerRemote Code Execution7.5 0.0178 Exploitation Less Likely
Showing 1 to 24 of 24 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.