CVE-2021-34474

HighCVSS 8.0/10Last modified Aug 10, 2026

Description

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.14>= 16.0, < 16.0.27253
MicrosoftMicrosoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.8>= 17.0, < 17.0.27235
MicrosoftMicrosoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.3>= 18.0, < 18.0.27469

References

Timeline

Published
Jul 14, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-344755.4Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2021-344767.5Bowser.sys Denial of Service VulnerabilityCVE-2021-344777.8Visual Studio Code .NET Runtime Elevation of Privilege VulnerabilityCVE-2021-344787.8Microsoft Office Remote Code Execution VulnerabilityCVE-2021-344797.8Microsoft Visual Studio Spoofing VulnerabilityCVE-2021-34484.0A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a CVE-2021-344806.8Scripting Engine Memory Corruption VulnerabilityCVE-2021-344818.8A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacCVE-2021-344837.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-344847.8Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-344855.0.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-344867.8Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-34474: High severity, CVSS 8.0 | Vulnix