CVE-2023-36420: Microsoft Odbc Driver For SQL Server

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Affected products

• Microsoft Odbc Driver For SQL Server: from 17, before 17.10.5.1 (fixed in 17.10.5.1); from 17.0.1.1, before 17.10.5.1 (fixed in 17.10.5.1); from 18.0, before 18.3.2.1 (fixed in 18.3.2.1); from 18.0.1.1, before 18.3.2.1 (fixed in 18.3.2.1)
• Microsoft SQL Server: version 2019 only; version 2022 only

Published 2023-10-10. Last modified 2026-06-17.