Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-37966

Sept. 10, 2024, 5:43 p.m.

CVSS Score

7.1 / 10

Product(s) Impacted

Microsoft SQL Server

Description

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Weaknesses

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE ID: 125

Date

Published: Sept. 10, 2024, 5:15 p.m.

Last Modified: Sept. 10, 2024, 5:43 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

secure@microsoft.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

Base Score

7.1

Exploitability Score

2.8

Impact Score

4.2

Base Severity