Microsoft update

KB5078943

Security Update

View on Microsoft →

Fixed in

Microsoft Dynamics 365 (on-premises) version 9.0 9.1.0044.0015
Microsoft Dynamics 365 (on-premises) version 9.1 9.1.45.11

Fixes 3 records

TI-2026-31102 CVE-2026-42898 · GHSA-f8w6-8hpv-rrjj

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

MEDIUM 45

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01194 Published 2026-05-12 Fixed in 9.1.45.11 CWE-94

TI-2026-31042 CVE-2026-42833 · GHSA-wq97-r6xw-c5c9

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

MEDIUM 43

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00748 Published 2026-05-12 Fixed in 9.1.45.11 CWE-250

TI-2026-25537 CVE-2026-33103 · GHSA-2xv6-cw52-2cqc

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

LOW 24

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2026-04-14 Fixed in 9.1.0044.0015 CWE-284