CVE-2022-34731

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-347328.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-347338.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2022-347348.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-347357.5The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernCVE-2022-347367.5The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernCVE-2022-347379.1The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data CVE-2022-347387.5The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the serCVE-2022-347397.5The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in tCVE-2022-34744.3A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead oCVE-2022-347406.5The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registratCVE-2022-347416.5The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registratCVE-2022-347427.5The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.