Microsoft · Security update · November 13, 2018

KB4467675: November 2018 security update

KB4467675, released November 13, 2018, fixes 6 CVEs in Microsoft Dynamics 365 (on-premises) version 8. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
6
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0990
95th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 2 High 4 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8609 Microsoft Dynamics Remote Code Execution n/a 0.0990 None reported
Urgent CVE-2018-8654 Microsoft Dynamics Elevation of Privilege n/a 0.0176 None reported
High CVE-2018-8605 Microsoft Dynamics Spoofing n/a 0.0161 None reported
High CVE-2018-8606 Microsoft Dynamics Spoofing n/a 0.0161 None reported
High CVE-2018-8607 Microsoft Dynamics Spoofing n/a 0.0161 None reported
High CVE-2018-8608 Microsoft Dynamics Spoofing n/a 0.0161 None reported
Showing 1 to 6 of 6 1