Microsoft · Security update · July 9, 2024

KB5040946: July 2024 security update

KB5040946, released July 9, 2024, fixes 37 CVEs in Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
37
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0185
79th percentile

Priority of the 37 CVEs

Patch now 0 Urgent 0 High 37 Routine 0

Applies to

Product
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-21398 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-21414 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-35271 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-35272 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Unlikely
High CVE-2024-37318 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-37331 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-37332 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-21332 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21333 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21335 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21373 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21415 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21428 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-38087 SQL Server Remote Code Execution 8.8 0.0168 Exploitation Less Likely
High CVE-2024-38088 SQL Server Remote Code Execution 8.8 0.0168 Exploitation Less Likely
High CVE-2024-37336 SQL Server Remote Code Execution 8.8 0.0168 Exploitation Less Likely
High CVE-2024-20701 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21308 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21317 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21331 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21425 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21449 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-28928 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-37319 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-37322 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
Showing 1 to 25 of 37 1Next