First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-32028

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	>= 19.0.0, < 19.3.0001.0
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	>= 18.0.0, < 18.6.0006.0
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	>= 16.11.0, < 16.11.33
Microsoft	Microsoft Visual Studio 2022 version 17.2	>= 17.2.0, < 17.2.23
Microsoft	Microsoft Visual Studio 2022 version 17.4	>= 17.4.0, < 17.4.15
Microsoft	Microsoft Visual Studio 2022 version 17.6	>= 17.6.0, < 17.6.11
Microsoft	Microsoft Visual Studio 2022 version 17.8	>= 17.8.0, < 17.8.4

References

Timeline

Published: Jun 16, 2023
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-320297.8Microsoft Excel Remote Code Execution Vulnerability CVE-2023-32034.3The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_p CVE-2023-320307.5.NET and Visual Studio Denial of Service Vulnerability CVE-2023-320318.8Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-320326.5.NET and Visual Studio Elevation of Privilege Vulnerability CVE-2023-320337.2Microsoft Failover Cluster Remote Code Execution Vulnerability CVE-2023-320347.5Remote Procedure Call Runtime Denial of Service Vulnerability CVE-2023-320357.5Remote Procedure Call Runtime Denial of Service Vulnerability CVE-2023-320376.5Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability CVE-2023-320388.8Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-320395.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability CVE-2023-32046.5The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. This is due

CVE-2023-32028: High severity, CVSS 7.8 | Vulnix