Rapid7

vulnerability

Microsoft Visual Studio: CVE-2024-0056: Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:N)
Published
Jan 9, 2024
Added
Jun 25, 2025
Modified
Mar 25, 2026

Description

Microsoft Visual Studio: CVE-2024-0056: Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Solutions

microsoft-visual_studio_2022-upgrade-latest-ltsc_17_2microsoft-visual_studio_2022-upgrade-latest-ltsc_17_4microsoft-visual_studio_2022-upgrade-latest-ltsc_17_6microsoft-visual_studio_2022-upgrade-latest-ltsc_17_8
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.