Microsoft · Security update · July 9, 2024

KB5040942: July 2024 security update

KB5040942, released July 9, 2024, fixes 36 CVEs in Microsoft SQL Server 2017 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
36
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0185
79th percentile

Priority of the 36 CVEs

Patch now 0 Urgent 0 High 36 Routine 0

Applies to

Product
Microsoft SQL Server 2017 for x64-based Systems (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-21398 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-21414 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-35271 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37318 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37331 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37332 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-21332 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21333 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21335 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21373 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21415 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21428 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-38087 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-38088 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-37336 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-20701 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21308 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21317 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21331 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21425 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21449 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-28928 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-37319 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-37322 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-37323 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
Showing 1 to 25 of 36 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.