Skip to content
OpenAdvisories
High MSRC-CVE-2021-34524 1 CVE

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Published Aug 10, 2021 · Updated Aug 11, 2021 · Revision 3

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Is the update for Microsoft Dynamics 365 (on-premises) version 9.1 currently available?
The security update for Microsoft Dynamics 365 (on-premises) version 9.1 is not immediately available. The update will be released as soon as possible, and when it is available, customers will be notified via a revision to this CVE information.

Security updates
9.1.3.11 — https://support.microsoft.com/en-us/topic/service-update-1-3-for-microsoft-dynamics-crm-on-premises-9-1-4f9cb846-6c00-4fc1-9c13-bc0bbe733009
9.0.31.7 — https://support.microsoft.com/en-us/topic/service-update-0-31-for-microsoft-dynamics-crm-on-premises-9-0-5bb7ff5b-8fbd-465c-8590-6e4522289913

Vulnerabilities 1

Revision history

  1. #3

    Microsoft is announcing the availability of the security updates for Microsoft Dynamics 365 (on-premises) version 9.1. Customers running affected Dynamics software should install the update for their product to be protected from this vulnerability. Customers running other versions of Microsoft Dynamics 365 (on-premises) do not need to take any action. See the [KB4618809](https://support.microsoft.com/en-us/topic/service-update-1-3-for-microsoft-dynamics-crm-on-premises-9-1-4f9cb846-6c00-4fc1-9c13-bc0bbe733009) for more information and download links.

  2. #1

    Information published.

  3. #2

    The following revisions have been made: 1) In the Security Updates table, updated the Download and Release Note links for Dynamics 365 (on-premises) version 9.0. This is an informational change only. 2) Added an FAQ regarding the availability of the security update for Microsoft Dynamics 365 (on-premises) version 9.1.

References