« Volver al listado

CVE-2023-32028

Estado: ModificadaAlta (7.8)—

Microsoft SQL OLE DB Remote Code Execution Vulnerability

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microsoft — OLE DB Driver FOR SQL ServerMicrosoft — SQL Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-32028",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "versions": [
            {
              "status": "affected",
              "version": "19.0.0",
              "lessThan": "19.3.0001.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "versions": [
            {
              "status": "affected",
              "version": "18.0.0",
              "lessThan": "18.6.0006.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
          "versions": [
            {
              "status": "affected",
              "version": "16.11.0",
              "lessThan": "16.11.33",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visual Studio 2022 version 17.2",
          "versions": [
            {
              "status": "affected",
              "version": "17.2.0",
              "lessThan": "17.2.23",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visual Studio 2022 version 17.4",
          "versions": [
            {
              "status": "affected",
              "version": "17.4.0",
              "lessThan": "17.4.15",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visual Studio 2022 version 17.6",
          "versions": [
            {
              "status": "affected",
              "version": "17.6.0",
              "lessThan": "17.6.11",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visual Studio 2022 version 17.8",
          "versions": [
            {
              "status": "affected",
              "version": "17.8.0",
              "lessThan": "17.8.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        }
      ]
    }
  ],
  "published": "2023-06-16T01:15:28.120",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32028",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32028",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@microsoft.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft SQL OLE DB Remote Code Execution Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución de código remota de Microsoft OLE DB\n"
    }
  ],
  "lastModified": "2026-06-17T05:57:53.677",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14AC92FA-A1F6-4DD6-9623-A2F33F59A4F9",
              "versionEndExcluding": "18.6.0006.0",
              "versionStartIncluding": "18.0.2"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6ABD3821-C5EB-4253-9D5E-6A1E29709AE3",
              "versionEndExcluding": "19.3.0001.0",
              "versionStartIncluding": "19.0.0"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
              "vulnerable": true,
              "matchCriteriaId": "9144F644-A3D4-440C-8978-257E71204617"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
              "vulnerable": true,
              "matchCriteriaId": "6CB7AD22-F27B-4807-88F1-02ED420421D5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}