CVE-2023-36417: Microsoft Ole DB Driver For SQL Server

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Affected products

• Microsoft Ole DB Driver For SQL Server: from 18.0.0, before 18.6.0007.0 (fixed in 18.6.0007.0); from 19.0.0, before 19.3.0002.0 (fixed in 19.3.0002.0)
• Microsoft SQL Server: version 2019 only; version 2022 only

Published 2023-10-10. Last modified 2026-06-17.