CVE-2023-36882
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
A vulnerability in the Microsoft WDAC OLE DB provider for SQL Server allows for remote code execution. An attacker can exploit this flaw to execute arbitrary code on a remote SQL server.
Risk Assessment
Exploitation of this vulnerability could lead to system takeover and access to sensitive data. Organizations may face significant financial and reputational damage.
Recommendation
It is recommended to update the software to the latest version and implement appropriate security measures to minimize the risk of exploitation.
Other vulnerabilities in Microsoft WDAC OLE DB provider for SQL Server
See all- CVE-2024-21420High
A vulnerability in Microsoft WDAC OLE DB provider for SQL Server allows remote code execution. An attacker could exploit this flaw to run malicious code on the server.
- CVE-2024-21391High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
- CVE-2024-21375High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
- CVE-2024-21370High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server.
- CVE-2024-21369High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit the flaw to execute code.
- CVE-2024-21368High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
- CVE-2024-21367High
A vulnerability in Microsoft WDAC OLE DB provider for SQL Server allows remote code execution. An attacker could exploit this flaw to run malicious code on the server.
- CVE-2024-21366High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the application using this provider.
- CVE-2024-21365High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the target system.
- CVE-2024-21361High
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Original NVD description (English source)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability