Microsoft · Security update · April 9, 2024

KB5037573: April 2024 security update

KB5037573, released April 9, 2024, fixes 24 CVEs in Microsoft OLE DB Driver 19 for SQL Server. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
24
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0281
86th percentile

Priority of the 24 CVEs

Patch now 0 Urgent 0 High 24 Routine 0

Applies to

Product
Microsoft OLE DB Driver 19 for SQL Server

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-28910 SQL Server Remote Code Execution 8.8 0.0281 Exploitation Less Likely
High CVE-2024-29985 SQL Server Remote Code Execution 8.8 0.0242 Exploitation Less Likely
High CVE-2024-28906 SQL Server Remote Code Execution 8.8 0.0242 Exploitation Less Likely
High CVE-2024-28909 SQL Server Remote Code Execution 8.8 0.0242 Exploitation Less Likely
High CVE-2024-29982 SQL Server Remote Code Execution 8.8 0.0240 Exploitation Less Likely
High CVE-2024-29983 SQL Server Remote Code Execution 8.8 0.0240 Exploitation Less Likely
High CVE-2024-29984 SQL Server Remote Code Execution 8.8 0.0240 Exploitation Less Likely
High CVE-2024-28908 SQL Server Remote Code Execution 8.8 0.0236 Exploitation Less Likely
High CVE-2024-28914 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-28927 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-28940 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-28942 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-28944 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-29044 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-29046 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-29048 SQL Server Remote Code Execution 8.8 0.0235 Exploitation Less Likely
High CVE-2024-28913 SQL Server Remote Code Execution 8.8 0.0229 Exploitation Less Likely
High CVE-2024-28912 SQL Server Remote Code Execution 8.8 0.0227 Exploitation Less Likely
High CVE-2024-28926 SQL Server Remote Code Execution 8.8 0.0227 Exploitation Less Likely
High CVE-2024-28939 SQL Server Remote Code Execution 8.8 0.0227 Exploitation Less Likely
High CVE-2024-28945 SQL Server Remote Code Execution 8.8 0.0227 Exploitation Less Likely
High CVE-2024-28911 SQL Server Remote Code Execution 8.8 0.0221 Exploitation Less Likely
High CVE-2024-28915 SQL Server Remote Code Execution 8.8 0.0221 Exploitation Less Likely
High CVE-2024-29045 SQL Server Remote Code Execution 7.5 0.0178 Exploitation Less Likely
Showing 1 to 24 of 24 1