Microsoft sql server 2016 vulnerabilities

Latest Microsoft sql server 2016 CVEs

Newest publication first · page 4 of 5

1. CVE-2024-37320 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

2. CVE-2024-37321 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

3. CVE-2024-21425 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

4. CVE-2024-37319 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

5. CVE-2024-21331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

6. CVE-2024-21308 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

7. CVE-2024-21317 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8. CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.5%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

9. CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

   Published 2024-07-09

   High·CVSS 8.8 EPSS 1.6%

   SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

10. CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

11. CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

12. CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

13. CVE-2024-37332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

14. CVE-2024-37318 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

15. CVE-2024-21428 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

16. CVE-2024-21415 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

17. CVE-2024-21414 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

18. CVE-2024-21398 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.9%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

19. CVE-2024-21373 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

20. CVE-2024-21335 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

21. CVE-2024-21333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

22. CVE-2024-21332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

23. CVE-2024-38088 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.7%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

24. CVE-2024-38087 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

    Published 2024-07-09

    High·CVSS 8.8 EPSS 1.7%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

25. CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.Json

    Published 2024-01-03

    High·CVSS 7.5 EPSS 32.9%

    Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.