Microsoft · Security update · September 12, 2023

KB5029396: September 2023 security update

KB5029396, released September 12, 2023, fixes 3 CVEs in Microsoft Dynamics 365 (on-premises) version 9.0. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0216
82nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2023-36886 Microsoft Dynamics Spoofing 7.6 0.0095 Exploitation Less Likely
High CVE-2023-38164 Microsoft Dynamics Spoofing 7.6 0.0094 Exploitation Less Likely
Routine CVE-2023-36433 Microsoft Dynamics Information Disclosure 6.5 0.0216 Exploitation Less Likely
Showing 1 to 3 of 3 1