HIGH 7.8 Microsoft

CVE-2023-23375

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Microsoft Security Update 2023-Apr: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Affected Products

Microsoft OLE DB Driver 18 for SQL Server
Microsoft OLE DB Driver 19 for SQL Server
Microsoft ODBC Driver 17 for SQL Server
Microsoft ODBC Driver 18 for SQL Server

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23375
https://nvd.nist.gov/vuln/detail/CVE-2023-23375

Published: 2023-04-11 · Source: Microsoft · Feed updated: 2026-09-17

This high severity vulnerability with a CVSS score of 7.8 was published on 2023-04-11 via Microsoft. Affected: Microsoft OLE DB Driver 18 for SQL Server, Microsoft OLE DB Driver 19 for SQL Server, Microsoft ODBC Driver 17 for SQL Server and 1 more.

vulnfeed aggregates 8294 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.