KB5035434: Security update for SQL Server 2019, GDR branch, April 2024. ODBC and OLE DB driver vulnerabilities addressed
Addresses 38 vulnerabilities in SQL Server-related drivers and updates SQL Server 2019 to build 15.0.2110.4. A restart might be requested.
Does it affect you? Applies to: This update is for SQL Server 2019 installations on the GDR branch. The available package is x64.
For servers on the GDR branch: they get security fixes only. Servers that install cumulative updates (CU branch) get a separate update. Which branch am I on?
What changes
Fix 1 change
ODBC Driver for SQL Server and OLE DB Driver for SQL Server
-
Remote code execution vulnerabilities in the SQL Server drivers are addressed.1
The listed vulnerabilities include CVEs affecting the Microsoft ODBC Driver and Microsoft OLE DB Driver for SQL Server.
Improvement 1 change
SQL Server
-
SQL Server 2019 is updated to build 15.0.2110.4.2
Product version 15.0.2110.4; file version 2019.150.2110.4.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-04-09
- Classification
- Security Updates
- Type
- Cumulative update
- Servicing branch
- GDR
- Restart
- Required
- Replaced by
- KB5040986
| Version | Build | Channel |
|---|---|---|
| 2019 | 15.0.2110.4 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|
The table lists the 0 exploited, publicly disclosed or critical vulnerabilities. See all 38 vulnerabilities →
Downloads (Microsoft Update Catalog)
Sources
Cited passages from Microsoft's official notes (2)
-
1.
- CVE-2024-28929 - Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
support.microsoft.com -
2.
SQL Server - Product version: 15.0.2110.4, file version: 2019.150.2110.4
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake