Microsoft · Security update · July 11, 2023

KB5026500: July 2023 security update

KB5026500, released July 11, 2023, fixes 4 CVEs in Microsoft Dynamics 365 (on-premises) version 9.0. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0087
59th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 2 Routine 2

Applies to

Product
Microsoft Dynamics 365 (on-premises) version 9.0

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2023-35335 Microsoft Dynamics Spoofing 8.2 0.0080 Exploitation Less Likely
High CVE-2023-33171 Microsoft Dynamics Spoofing 8.2 0.0067 Exploitation Less Likely
Routine CVE-2023-36416 Microsoft Dynamics Spoofing 6.1 0.0087 Exploitation Less Likely
Routine CVE-2023-35389 Microsoft Dynamics Remote Code Execution 6.5 0.0076 Exploitation Less Likely
Showing 1 to 4 of 4 1