CVE-2023-32026: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Published Jun 15, 2023
·Updated
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected Software
20 affected componentsFixes available
Microsoft ODBC Driver 17 for SQL Server on Windows
Microsoft ODBC Driver 18 for SQL Server on MacOS
Microsoft ODBC Driver 17 for SQL Server on MacOS
Microsoft ODBC Driver 18 for SQL Server on Linux
Microsoft ODBC Driver 18 for SQL Server on Windows
Microsoft ODBC Driver 17 for SQL Server on Linux
Microsoft SQL Server 2022 (CU 5)
Microsoft SQL Server 2019 (CU 21)
Microsoft Visual Studio 2019 (includes 16.0 - 16.10)=16.11
Microsoft Odbc Driver For Sql Server Linux>=17.0.1.1<17.10.4.1
Microsoft Odbc Driver For Sql Server Macos>=17.0.1.1<17.10.4.1
Microsoft Odbc Driver For Sql Server Windows>=17.0.1.1<17.10.4.1
Microsoft Odbc Driver For Sql Server Linux>=18.0.1.1<18.2.1.1
Microsoft Odbc Driver For Sql Server Macos>=18.0.1.1<18.2.1.1
Microsoft Odbc Driver For Sql Server Windows>=18.0.1.1<18.2.1.1
Microsoft SQL Server=2019
Microsoft SQL Server=2022
Microsoft Visual Studio 2022=17.4
Microsoft Visual Studio 2022=17.2
Microsoft Visual Studio 2022=17.8
Remediation
Event History
Jun 15, 2023
CVE Published
07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Jun 16, 2023
CVE Published
via MITRE·12:44 AM
Data Sourced
via MITRE·12:44 AM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-32026?
CVE-2023-32026 is a vulnerability in the Microsoft ODBC Driver for SQL Server that allows remote code execution.
2
How severe is CVE-2023-32026?
CVE-2023-32026 has a severity rating of 7.8, which is considered high.
3
Which software products are affected by CVE-2023-32026?
CVE-2023-32026 affects the Microsoft ODBC Driver 17 and 18 for SQL Server on Windows, MacOS, and Linux, as well as the SQL Server 2022 (CU 5) and 2019 (CU 21).
4
How can I fix CVE-2023-32026?
To fix CVE-2023-32026, you should apply the patches or updates provided by Microsoft for the affected ODBC drivers or SQL Server versions.
5
Where can I find more information about CVE-2023-32026?
You can find more information about CVE-2023-32026 on the Microsoft Security Response Center website.