VDB
GCVE-110-NCSC-2024-364
GCVE-110-NCSC-2024-364
Advisory PublishedCVSS 8.8/10
Microsoft heeft kwetsbaarheden verholpen in SQL Server.
Weaknesses (CWE)
CWE-125Out-of-bounds ReadCWE-122Heap-based Buffer OverflowCWE-822Untrusted Pointer DereferenceCWE-197Numeric Truncation ErrorCWE-416Use After FreeCWE-170Improper Null TerminationCWE-20Improper Input ValidationCWE-284Improper Access ControlCWE-269Improper Privilege Management
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| microsoft | microsoft_sql_server_2019__gdr_ | — | — |
| microsoft | microsoft_sql_server_2017__cu_31_ | — | — |
| microsoft | microsoft_sql_server_2016_service_pack_3__gdr_ | — | — |
| microsoft | microsoft_sql_server_2022_for__cu_14_ | — | — |
| microsoft | microsoft_sql_server_2017__gdr_ | — | — |
| microsoft | microsoft_sql_server_2019__cu_28_ | — | — |
| microsoft | microsoft_sql_server_2022__gdr_ | — | — |
| microsoft | microsoft_sql_server_2016_service_pack_3_azure_connect_feature_pack | — | — |
Browse GCVE Records
73,053 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.