← Database

CVE-2026-42833

CRITICAL CVSS: 9.1 Published: 2026-05-12 Modified: 2026-06-17

Description

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Affected Platforms

Microsoft Dynamics 365

Weakness Type

CWE-250, NVD-CWE-noinfo

References