CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
45.6%
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.
Below is a complete list of vulnerabilities:
CVE-2023-36730 unknown
CVE-2023-36728 unknown
CVE-2023-36420 unknown
CVE-2023-36417 unknown
CVE-2023-36785 unknown
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.
Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.
support.microsoft.com/kb/5029184
support.microsoft.com/kb/5029185
support.microsoft.com/kb/5029186
support.microsoft.com/kb/5029187
support.microsoft.com/kb/5029375
support.microsoft.com/kb/5029376
support.microsoft.com/kb/5029377
support.microsoft.com/kb/5029378
support.microsoft.com/kb/5029379
support.microsoft.com/kb/5029503
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36417
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36420
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36728
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36730
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36785
statistics.securelist.com/
threats.kaspersky.com/en/product/Microsoft-Azure/
threats.kaspersky.com/en/product/Microsoft-SQL-Server/
threats.kaspersky.com/en/product/Microsoft-Windows/