CVE-2024-43519
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- EPSS probability
- 1.41%
- CWE
- CWE-197
- Published
- 2024-10-08
- Last modified
- 2026-08-19
Affected products
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 11 version 22H2
- Microsoft Windows 10 Version 22H2
Weakness type
Related vulnerabilities
- CVE-2022-42475 — A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
- CVE-2026-87529 — Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execu
- CVE-2020-15202 — Integer truncation in Shard API usage
- CVE-2023-32143 — D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
- CVE-2022-34670 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged reg
- CVE-2025-6965 — Integer Truncation on SQLite
- CVE-2026-6679 — DTLS 1.3 ACK serialization heap buffer overflow via integer truncation
- CVE-2026-42944 — Heap overflow with multiple NSID, COOKIE, PADDING EDNS options