Microsoft · Security update · July 9, 2024

KB5040939: July 2024 security update

KB5040939, released July 9, 2024, fixes 38 CVEs in Microsoft SQL Server 2022 for x64-based Systems (CU 13). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
38
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0185
79th percentile

Priority of the 38 CVEs

Patch now 0 Urgent 0 High 38 Routine 0

Applies to

Product
Microsoft SQL Server 2022 for x64-based Systems (CU 13)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-21398 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-21414 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-35271 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-35272 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Unlikely
High CVE-2024-37318 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37331 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37332 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-21332 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21333 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21335 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21373 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21415 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21428 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-38087 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-38088 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-37336 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-37334 SQL ServerRemote Code Execution8.8 0.0165 Exploitation Less Likely
High CVE-2024-20701 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21308 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21317 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21331 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21425 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21449 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-28928 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-37319 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
Showing 1 to 25 of 38 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.