CVE-2024-37966

HIGH 7.1CVE-2024-37966 · Published 10/09/2024 · updated 10/08/2026

In short

CVE-2024-37966 is a HIGH (CVSS 7.1) vulnerability affecting sql server 2017 (microsoft), sql server 2019 (microsoft), sql server 2022 (microsoft).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.5% of all vulnerabilities.
Fix: update to 14.0.2060.1, 14.0.3475.1, 15.0.2120.1, 15.0.4390.2 or later.

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

In short

CVE-2024-37966 is a HIGH (CVSS 7.1) vulnerability affecting sql server 2017 (microsoft), sql server 2019 (microsoft), sql server 2022 (microsoft).

Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.5% of all vulnerabilities.

Fix: update to 14.0.2060.1, 14.0.3475.1, 15.0.2120.1, 15.0.4390.2 or later.

Package

Affected versions

Patched versions

≥ 14.0.1000.169, < 14.0.2060.1≥ 14.0.3006.16, < 14.0.3475.1

14.0.2060.114.0.3475.1

≥ 15.0.2000.5, < 15.0.2120.1≥ 15.0.4003.23, < 15.0.4390.2

15.0.2120.115.0.4390.2

≥ 16.0.1000.6, < 16.0.1125.1≥ 16.0.4003.1, < 16.0.4140.3

16.0.1125.116.0.4140.3

More vulnerabilities in sql server 2017

See all →