CVE-2023-21685 PUBLISHED CVSS 8.800000190734863 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

EPSS 8.08% · 92.1th percentile

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
8.08%
92.1th percentile

Affected Products

VendorProductVersions
microsoftwindows_server_20126.2.9200.0, r2, r2
microsoftwindows_server_201910.0.17763.0, 10.0.17763.0
microsoftwindows_server_201610.0.14393.0, 10.0.14393.0
MicrosoftWindows 10 Version 150710.0.10240.0
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0
microsoftwindows_10_22h20, 0, 0
microsoftwindows_10_150710.0.10240.0, 0, 0
MicrosoftWindows Server 2008 R2 Service Pack 16.1.7601.0
microsoftwindows_10_20H210.0.0
microsoftwindows_server_2008r2, r2, r2
MicrosoftWindows Server 2012 (Server Core installation)6.2.9200.0
microsoftwindows_server_2012_R26.3.9600.0, 6.3.9600.0
microsoftwindows_10_21h20, 0, 0
microsoftwindows_10_16070, 10.0.14393.0, 0
microsoftwindows_11_21h20, 0, 0
microsoftwindows_server_202210.0.20348.0
MicrosoftWindows 10 Version 160710.0.14393.0
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0
MicrosoftWindows 10 Version 180910.0.0, 10.0.17763.0
MicrosoftWindows Server 2016 (Server Core installation)10.0.14393.0

…and 23 more

Timeline

References

Open in Interactive Console →