Skip to content
VulniPulse
Sign in
High8.8Microsoft Server

High [CVE-2024-37980] Microsoft SQL Server Elevation of Privilege Vulnerability

This high-severity Microsoft Server advisory covers CVE-2024-37980 affecting Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31).

CVE-2024-37980 Published Sep 10, 2024Updated by vendor Aug 10, 2026
CVE-2024-37980
Affected products & platforms
Microsoft ServerSQL Server
Open vendor advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Microsoft SQL Server Elevation of Privilege Vulnerability

Affected products named by the advisory: Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; Microsoft SQL Server 2017 (CU 31); Microsoft SQL Server 2017 (GDR); and 4 more.

Affected products named by the advisory: Microsoft SQL Server 2019 (CU 28); Microsoft SQL Server 2019 (GDR); Microsoft SQL Server 2022 (GDR); Microsoft SQL Server 2022 for (CU 14).

Affected versions
  • Microsoft SQL Server 2016 Service Pack 3 (GDR) 13.0.0 before 13.0.6445.1
  • Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack 13.0.0 before 13.0.7040.1
  • Microsoft SQL Server 2017 (CU 31) 14.0.0 before 14.0.3475.1
  • Microsoft SQL Server 2017 (GDR) 14.0.0 before 14.0.2060.1
  • Microsoft SQL Server 2019 (CU 28) 15.0.0 before 15.0.4390.2
  • Microsoft SQL Server 2019 (GDR) 15.0.0 before 15.0.2120.1
  • Microsoft SQL Server 2022 (GDR) 16.0.0 before 16.0.1125.1
  • Microsoft SQL Server 2022 for (CU 14) 16.0.0 before 16.0.4140.3

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions
  • 13.0.6445.1
  • 13.0.7040.1
  • 14.0.3475.1
  • 14.0.2060.1
  • 15.0.4390.2
  • 15.0.2120.1
  • 16.0.1125.1
  • 16.0.4140.3

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation

Upgrade to a fixed release: 13.0.6445.1, 13.0.7040.1, 14.0.3475.1, 14.0.2060.1, 15.0.4390.2, 15.0.2120.1. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.