CVE-2026-42833: falha crítica em Microsoft Dynamics 365 (on-premises) version 9.1
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 0.7%
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Dynamics 365 (on-premises) version 9.1CVEs relacionadas — Microsoft Dynamics 365 (on-premises) version 9.1
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34524HIGHMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 3.6%CVE-2022-23259HIGHMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 2.9%CVE-2022-21957HIGHMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 2.7%CVE-2021-42316HIGHMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 2.3%CVE-2023-36429MEDIUMMicrosoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityEPSS 2.2%CVE-2023-36433MEDIUMMicrosoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityEPSS 2.2%