CVE-2024-0056

score

<0.1

cvss

8.7

epss

1.2%

published

2024-01-09

kev added

—

first seen

2026-10-21

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider contain a security feature bypass caused by improper validation in SQL command handling, letting attackers bypass security controls, exploit requires network access and crafted SQL commands.