CVE-2023-2171814.02.2023, 20:15Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityWrap or WraparoundEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST7.8 HIGHLOCALLOWNONECVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HmicrosoftCNA7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CCVEADP------CISA-ADPADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 62%Common Weakness EnumerationCWE-191 - Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.Referenceshttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718