Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2008 R2 Service Pack 3 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2008 Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2012 Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (CU 4) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (CU 31) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (CU 18) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2022 (GDR) | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-25696 | Microsoft SQL Server Remote Code Execution Vulnerability |
Mon, 02 Nov 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 25 Feb 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:-:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:r2_sp2:x86:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:*:sp3:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:sp4:*:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:*:sp4:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:* |
Wed, 01 Jan 2025 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:* cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:x64:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:x86:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:x86:* cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:* |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-11-02T22:18:07.676Z
Reserved: 2022-12-01T14:00:11.197Z
Link: CVE-2023-21528
Vulnrichment
Updated: 2024-08-02T09:44:01.302Z
NVD
Status : Modified
Published: 2023-02-14T20:15:11.637
Modified: 2026-11-02T23:17:12.973
Link: CVE-2023-21528
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-122
Heap-based Buffer Overflow
- NVD-CWE-noinfo