Microsoft SQL 2016 Azure Connect Feature Pack vulnerabilities

9 CVEs affecting Microsoft SQL 2016 Azure Connect Feature Pack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-37342, published 2024-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-37342, published 2024-09-10. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
CVE-2024-37337, published 2024-09-10. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
CVE-2024-37340, published 2024-09-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2024-37339, published 2024-09-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2024-37338, published 2024-09-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2024-37335, published 2024-09-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2024-26191, published 2024-09-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2024-26186, published 2024-09-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
CVE-2024-37341, published 2024-09-10. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Microsoft SQL Server Elevation of Privilege Vulnerability