CVE-2023-23384High· 7.3▾ Twilight

Microsoft SQL Server Remote Code Execution Vulnerability

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score40/ 100 · Moderate

impact 40.2 · likelihood 0.2 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Apr 11, 2023

Updated

Nov 2, 2026

CVSS

7.3

Vendor

Microsoft

Product

Microsoft SQL Server 2008 Service Pack 4 (QFE)

CWE

CWE-122

Depth score

40 · Moderate

EPSS

0.87% · p59

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

CISA SSVC

decided 2026-10-08

Exploitation: none
Automatable: yes
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 1304 days

Apr 11, 2023Published
Disclosed via CVEORG
Nov 2, 2026Record revised
Last analysed / modified upstream
Nov 5, 2026EPSS first tracked
0.9%

Microsoft CWE-122 #cve.org

Affected

sql_server_2008_service_pack_4_qfe >= 10.0.0 < 10.0.6814.4
sql_server_2012_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2012_for_x64-based_systems_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2017_gdr >= 14.0.0 < 14.0.2047.8
sql_server_2008_r2_service_pack_3_qfe >= 10.0.0 < 10.50.6785.2
sql_server_2014_service_pack_3_gdr >= 12.0.0 < 12.0.6444.4
sql_server_2014_service_pack_3_cu_4 >= 12.0.0 < 12.0.6174.8
sql_server_2019_gdr >= 15.0.0 < 15.0.2101.7
sql_server_2016_service_pack_3_gdr >= 13.0.0 < 13.0.6430.49
sql_server_2016_service_pack_3_azure_connect_feature_pack >= 13.0.0 < 13.0.7024.30
sql_server_2017_cu_31 >= 14.0.0 < 14.0.3460.9
sql_server_2019_cu_18 >= 15.0.0 < 15.0.4280.7
sql_server_2022_gdr >= 16.0.0 < 16.0.1050.5

Full technical detail▾

Overview

Microsoft SQL Server Remote Code Execution Vulnerability

Affected

sql_server_2008_service_pack_4_qfe >= 10.0.0 < 10.0.6814.4
sql_server_2012_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2012_for_x64-based_systems_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2017_gdr >= 14.0.0 < 14.0.2047.8
sql_server_2008_r2_service_pack_3_qfe >= 10.0.0 < 10.50.6785.2
sql_server_2014_service_pack_3_gdr >= 12.0.0 < 12.0.6444.4
sql_server_2014_service_pack_3_cu_4 >= 12.0.0 < 12.0.6174.8
sql_server_2019_gdr >= 15.0.0 < 15.0.2101.7
sql_server_2016_service_pack_3_gdr >= 13.0.0 < 13.0.6430.49
sql_server_2016_service_pack_3_azure_connect_feature_pack >= 13.0.0 < 13.0.7024.30
sql_server_2017_cu_31 >= 14.0.0 < 14.0.3460.9
sql_server_2019_cu_18 >= 15.0.0 < 15.0.4280.7
sql_server_2022_gdr >= 16.0.0 < 16.0.1050.5

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Microsoft SQL Server Remote Code Execution Vulnerability — https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23384

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org

← Back to feed

CVE-2023-23384High· 7.3▾ Twilight

Microsoft SQL Server Remote Code Execution Vulnerability

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score40/ 100 · Moderate

impact 40.2 · likelihood 0.2 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Apr 11, 2023

Updated

Nov 2, 2026

CVSS

7.3

Vendor

Microsoft

Product

Microsoft SQL Server 2008 Service Pack 4 (QFE)

CWE

CWE-122

Depth score

40 · Moderate

EPSS

0.87% · p59

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

CISA SSVC

decided 2026-10-08

Exploitation: none
Automatable: yes
Technical impact: partial

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 1304 days

Apr 11, 2023Published
Disclosed via CVEORG
Nov 2, 2026Record revised
Last analysed / modified upstream
Nov 5, 2026EPSS first tracked
0.9%

Microsoft CWE-122 #cve.org

Affected

sql_server_2008_service_pack_4_qfe >= 10.0.0 < 10.0.6814.4
sql_server_2012_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2012_for_x64-based_systems_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2017_gdr >= 14.0.0 < 14.0.2047.8
sql_server_2008_r2_service_pack_3_qfe >= 10.0.0 < 10.50.6785.2
sql_server_2014_service_pack_3_gdr >= 12.0.0 < 12.0.6444.4
sql_server_2014_service_pack_3_cu_4 >= 12.0.0 < 12.0.6174.8
sql_server_2019_gdr >= 15.0.0 < 15.0.2101.7
sql_server_2016_service_pack_3_gdr >= 13.0.0 < 13.0.6430.49
sql_server_2016_service_pack_3_azure_connect_feature_pack >= 13.0.0 < 13.0.7024.30
sql_server_2017_cu_31 >= 14.0.0 < 14.0.3460.9
sql_server_2019_cu_18 >= 15.0.0 < 15.0.4280.7
sql_server_2022_gdr >= 16.0.0 < 16.0.1050.5

Full technical detail▾

Overview

Microsoft SQL Server Remote Code Execution Vulnerability

Affected

sql_server_2008_service_pack_4_qfe >= 10.0.0 < 10.0.6814.4
sql_server_2012_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2012_for_x64-based_systems_service_pack_4_qfe >= 11.0.0 < 11.0.7512.11
sql_server_2017_gdr >= 14.0.0 < 14.0.2047.8
sql_server_2008_r2_service_pack_3_qfe >= 10.0.0 < 10.50.6785.2
sql_server_2014_service_pack_3_gdr >= 12.0.0 < 12.0.6444.4
sql_server_2014_service_pack_3_cu_4 >= 12.0.0 < 12.0.6174.8
sql_server_2019_gdr >= 15.0.0 < 15.0.2101.7
sql_server_2016_service_pack_3_gdr >= 13.0.0 < 13.0.6430.49
sql_server_2016_service_pack_3_azure_connect_feature_pack >= 13.0.0 < 13.0.7024.30
sql_server_2017_cu_31 >= 14.0.0 < 14.0.3460.9
sql_server_2019_cu_18 >= 15.0.0 < 15.0.4280.7
sql_server_2022_gdr >= 16.0.0 < 16.0.1050.5

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Microsoft SQL Server Remote Code Execution Vulnerability — https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23384

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org