Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2022 for (CU 13) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU 27) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (CU 31) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2022 (GDR) | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-19016 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
Wed, 10 Dec 2025 01:00:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft sql Server
|
|
| CPEs | cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:-:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:sp3:*:*:*:*:x64:* |
|
| Vendors & Products |
Microsoft sql Server
|
Tue, 15 Jul 2025 15:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Tue, 10 Dec 2024 19:00:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:* |
|
| Vendors & Products |
Microsoft sql Server
|
Wed, 18 Sep 2024 10:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 10 Sep 2024 20:15:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft sql Server 2016
Microsoft sql Server 2017 Microsoft sql Server 2019 Microsoft sql Server 2022 |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:microsoft:sql_server_2016:*:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server_2016:13.0.6441.1:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:sql_server_2016:13.0.6441.1:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:sql_server_2016:13.0.7037.1:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:sql_server_2016:13.0.7037.1:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:sql_server_2017:*:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:* |
|
| Vendors & Products |
Microsoft sql Server 2016
Microsoft sql Server 2017 Microsoft sql Server 2019 Microsoft sql Server 2022 |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2025-12-09T23:47:01.394Z
Reserved: 2023-12-08T22:45:19.365Z
Link: CVE-2024-21303
Vulnrichment
Updated: 2024-08-01T22:13:42.699Z
NVD
Status : Modified
Published: 2024-07-09T17:15:11.117
Modified: 2026-06-17T07:08:56.610
Link: CVE-2024-21303
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-416
Use After Free
- NVD-CWE-noinfo