CVE-2024-37334: Microsoft Ole DB Driver For SQL Server

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Affected products

• Microsoft Ole DB Driver For SQL Server: from 18.0.2, before 18.7.0004.0 (fixed in 18.7.0004.0); from 19.0.0, before 19.3.0005.0 (fixed in 19.3.0005.0)
• Microsoft SQL Server 2019: before 15.0.2116.2 (fixed in 15.0.2116.2); from 15.0.4375.4, before 15.0.4382.1 (fixed in 15.0.4382.1)
• Microsoft SQL Server 2022: before 16.0.1121.4 (fixed in 16.0.1121.4); from 16.0.4125.3, before 16.0.4131.2 (fixed in 16.0.4131.2)

Published 2024-07-09. Last modified 2026-06-17.