Microsoft · Security update · July 9, 2024

KB5040946: July 2024 security update

KB5040946, released July 9, 2024, fixes 37 CVEs in Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
37
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0185
79th percentile

Priority of the 37 CVEs

Patch now 0 Urgent 0 High 37 Routine 0

Applies to

Product
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-21398 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-21414 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-35271 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-35272 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Unlikely
High CVE-2024-37318 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37331 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-37332 SQL ServerRemote Code Execution8.8 0.0185 Exploitation Less Likely
High CVE-2024-21332 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21333 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21335 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21373 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21415 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-21428 SQL ServerRemote Code Execution8.8 0.0179 Exploitation Less Likely
High CVE-2024-38087 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-38088 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-37336 SQL ServerRemote Code Execution8.8 0.0168 Exploitation Less Likely
High CVE-2024-20701 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21308 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21317 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21331 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21425 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-21449 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-28928 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-37319 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
High CVE-2024-37322 SQL ServerRemote Code Execution8.8 0.0161 Exploitation Less Likely
Showing 1 to 25 of 37 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.