CVE-2024-37966

Published: Sep 10, 2024Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Exploitability: 2.8 / Impact: 4.2

Source: secure@microsoft.com (Secondary)

Description

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Affected (6)

Products: Microsoft: Sql Server 2017, Sql Server 2019, Sql Server 2022

3 products

Sql Server 2017

Sql Server 2019

Sql Server 2022

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server 2017	From 14.0.1000.169 to 14.0.2060.1
Microsoft Sql Server 2017	From 14.0.3006.16 to 14.0.3475.1
Microsoft Sql Server 2019	From 15.0.2000.5 to 15.0.2120.1
Microsoft Sql Server 2019	From 15.0.4003.23 to 15.0.4390.2
Microsoft Sql Server 2022	From 16.0.1000.6 to 16.0.1125.1
Microsoft Sql Server 2022	From 16.0.4003.1 to 16.0.4140.3

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37966

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.