CVE-2024-48994 HIGH

CVE-2024-48994: SQL Server Native Client Remote Code Execution Vulnerability

Vendor Microsoft
Product Microsoft SQL Server 2017 (GDR)
Weakness CWE-122
Published November 12, 2024
Last update July 8, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

SQL Server Native Client Remote Code Execution Vulnerability

Key dates

02Disclosure timeline

November 12, 2024 CVE published
July 8, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-34770 Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability CVE-2024-37335 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability CVE-2024-21594 Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash CVE-2026-21248 Windows Hyper-V Remote Code Execution Vulnerability CVE-2025-2309 HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow