CVE-2024-21331

概要

参考情報

• msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21331 · Vendor Advisory

sql server 2016 のその他の脆弱性

• CVE-2026-47295高 8.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate …
• CVE-2026-55002高 8.8External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.
• CVE-2026-54118緊急 9.8Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
• CVE-2026-54117緊急 9.8Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
• CVE-2026-47296高 7.5Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate …