Microsoft · Security update · July 9, 2024

KB5040986: July 2024 security update

KB5040986, released July 9, 2024, fixes 38 CVEs in Microsoft SQL Server 2019 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
38
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0185
79th percentile

Priority of the 38 CVEs

Patch now 0 Urgent 0 High 38 Routine 0

Applies to

Product
Microsoft SQL Server 2019 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-21398 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-21414 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-35271 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-35272 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Unlikely
High CVE-2024-37318 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-37331 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-37332 SQL Server Remote Code Execution 8.8 0.0185 Exploitation Less Likely
High CVE-2024-21332 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21333 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21335 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21373 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21415 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-21428 SQL Server Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2024-38087 SQL Server Remote Code Execution 8.8 0.0168 Exploitation Less Likely
High CVE-2024-38088 SQL Server Remote Code Execution 8.8 0.0168 Exploitation Less Likely
High CVE-2024-37336 SQL Server Remote Code Execution 8.8 0.0168 Exploitation Less Likely
High CVE-2024-37334 SQL Server Remote Code Execution 8.8 0.0165 Exploitation Less Likely
High CVE-2024-20701 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21308 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21317 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21331 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21425 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-21449 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-28928 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2024-37319 SQL Server Remote Code Execution 8.8 0.0161 Exploitation Less Likely
Showing 1 to 25 of 38 1Next