← Back

CVE-2024-26162

nvd nist
Published: Mar 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Microsoft ODBC Driver Remote Code Execution Vulnerability

Affected (18)

Microsoft
14 products
Windows 10 1507
Windows 10 1607
Windows 10 1809
Windows 10 21h2
Windows 10 22h2
Windows 11 21h2
Windows 11 22h2
Windows 11 23h2
Windows Server 2008
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2022 23h2
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 10 1507
version < 10.0.10240.20526
Windows 10 1507
version < 10.0.10240.20526
Microsoft
Windows 10 1607
version < 10.0.14393.6796
Windows 10 1607
version < 10.0.14393.6796
Windows 10 1809
version < 10.0.17763.5576
Windows 10 21h2
version < 10.0.19044.4170
Windows 10 22h2
version < 10.0.19045.4170
Windows 11 21h2
version < 10.0.22000.2836
Windows 11 22h2
version < 10.0.22621.3296
Windows 11 23h2
version < 10.0.22631.3296
Microsoft
Windows Server 2008
All versions
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2
Windows Server 2016
version < 10.0.14393.6796
Windows Server 2019
version < 10.0.17763.5576
Windows Server 2022
version < 10.0.20348.2333
Windows Server 2022 23h2
version < 10.0.25398.763

Related CWEs

CWE-681
Incorrect Conversion between Numeric Types
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

References (2)

Source: secure@microsoft.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.