Technical Information

Brief overview of the risk:

This is a remote code execution vulnerability in on-premise Microsoft Dynamics 365. Microsoft has flagged this vulnerability as ‘Exploitation Less Likely’. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host machine in the context of the logged on user.

Further information on this vulnerability is available at : CVE-2021-42316