Analysis Summary

CVE-2024-35260

Microsoft Dataverse could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an untrusted search path flaw. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2024-35260

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

Microsoft Security Update Guide