Microsoft · Security update · September 10, 2024

KB5042217: September 2024 security update

KB5042217, released September 10, 2024, fixes 12 CVEs in Microsoft SQL Server 2017 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
12
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0219
82nd percentile

Priority of the 12 CVEs

Patch now 0 Urgent 0 High 12 Routine 0

Applies to

Product
Microsoft SQL Server 2017 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-37966 SQL Server Information Disclosure 7.1 0.0219 Exploitation Less Likely
High CVE-2024-37965 SQL Server Elevation of Privilege 8.8 0.0170 Exploitation Less Likely
High CVE-2024-37337 SQL Server Information Disclosure 7.1 0.0166 Exploitation Less Likely
High CVE-2024-37342 SQL Server Information Disclosure 7.1 0.0166 Exploitation Less Likely
High CVE-2024-26186 SQL Server Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-26191 SQL Server Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-37335 SQL Server Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-37338 SQL Server Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-37339 SQL Server Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-37340 SQL Server Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-37980 SQL Server Elevation of Privilege 8.8 0.0136 Exploitation Less Likely
High CVE-2024-43474 SQL Server Information Disclosure 7.6 0.0127 Exploitation Less Likely
Showing 1 to 12 of 12 1