Sql Server 2019 CVE-2024-29047

HIGH

Heap-based Buffer Overflow (CWE-122)

2024-04-09 secure@microsoft.com

Heap Overflow Buffer Overflow RCE Microsoft Sql Server 2019 Sql Server 2022

8.8

CVSS 3.1 · Vendor: microsoft

Share

Severity by source

Vendor (microsoft) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Apr 09, 2024 - 17:15 cve.org

HIGH 8.8

DescriptionCVE.org

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

AnalysisAI

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-122. Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected products include: Microsoft Sql Server 2019, Microsoft Sql Server 2022.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Sql Server 2019

View all

CVE-2026-21262 HIGH This Week POC

SQL Server 2016-2025 contains an improper access control flaw that allows authenticated network attackers to escalate pr

CVE-2024-37980 CRITICAL Act Now

Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is rem

CVE-2024-37341 CRITICAL Act Now

Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is rem

CVE-2025-49759 HIGH This Week

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

CVE-2025-49758 HIGH This Week

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

CVE-2025-53727 HIGH This Week

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

CVE-2026-26115 HIGH This Week

Privilege escalation in SQL Server 2016-2025 stems from insufficient input validation, enabling authenticated network at

CVE-2026-26116 HIGH This Week

Authenticated users can exploit SQL injection vulnerabilities in SQL Server 2016-2025 to escalate privileges and gain un

CVE-2024-49018 HIGH This Week

SQL Server Native Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remo

CVE-2024-49017 HIGH This Week

SQL Server Native Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remo

CVE-2024-49016 HIGH This Week

SQL Server Native Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remo

CVE-2024-49015 HIGH This Week

SQL Server Native Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remo

Same weakness CWE-122 – Heap-based Buffer Overflow

View all

CVE-2023-4911 HIGH POC

CVE-2025-24985 HIGH POC

CVE-2025-21418 HIGH

CVE-2025-24993 HIGH

CVE-2023-6246 HIGH POC

CVE-2026-42945 CRITICAL POC

CVE-2014-0781 CRITICAL POC

CVE-2024-30085 HIGH POC

Same technique Heap Overflow

View all

CVE-2023-4911 HIGH POC

CVE-2025-5419 HIGH POC

CVE-2025-21418 HIGH

CVE-2023-6246 HIGH POC

CVE-2026-42945 CRITICAL POC

CVE-2014-0781 CRITICAL POC

CVE-2024-30085 HIGH POC

CVE-2024-30038 HIGH POC

Share

CVE-2024-29047 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy