CVE-2022-41127
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
HIGH
8.5
CVSS Score
Published: December 13, 2022 at 12:00 AM UTC
Updated: June 17, 2026 at 05:02 AM UTC
5 products affected across 1 vendorDynamics 365-business CentralDynamics NavDynamics 365 Business Central 2021
Using Microsoft Dynamics NAV 2016 by Microsoft?
Get instant alerts when new vulnerabilities affect Microsoft Dynamics NAV 2016 - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.5
Exploit prediction
EPSS 2%
Description
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
14.0.0 ≤ v < App Build 14.43.49498, Platform Build 14.0.4949415.0.0 ≤ v < App Build 15.17.48428, Platform Build 15.0.4816.0.0 ≤ v < App Build 16.19.35126, Platform Build 16.3512017.0.0 ≤ v < App Build 17.17.38111, Platform Build 17.0.3806118.0.0 ≤ v < App Build 18.18.46920, Platform Build 18.0.4690519.0.0 ≤ v < App Build 19.14.49970, Platform Build 19.0.4992520.0.0 ≤ v < App Build 20.8.49971, Platform Build 20.0.4994721.0.0 ≤ v < App Build 21.2.49990, Platform Build 21.0.4998414.0.015.0.016.0.017.0.018.0.019.0.020.0.02019 release_wave_22019 spring_update2020 release_wave_12020 release_wave_22021 release_wave_12021 release_wave_22022 release_wave_121.0.0
Affected range stops below App Build 14.43.49498, Platform Build 14.0.49494, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 15.17.48428, Platform Build 15.0.48, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 16.19.35126, Platform Build 16.35120, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 17.17.38111, Platform Build 17.0.38061, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 18.18.46920, Platform Build 18.0.46905, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 19.14.49970, Platform Build 19.0.49925, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 20.8.49971, Platform Build 20.0.49947, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 21.2.49990, Platform Build 21.0.49984, so it looks safe — our inference, not a vendor statement
14.0.0 ≤ v < App Build 14.43.49498, Platform Build 14.0.4949415.0.0 ≤ v < App Build 15.17.48428, Platform Build 15.0.48
Affected range stops below App Build 14.43.49498, Platform Build 14.0.49494, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 15.17.48428, Platform Build 15.0.48, so it looks safe — our inference, not a vendor statement
18.0.0 ≤ v < App Build 18.18.46920, Platform Build 18.0.4690519.0.0 ≤ v < App Build 19.14.49970, Platform Build 19.0.49925
Affected range stops below App Build 18.18.46920, Platform Build 18.0.46905, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 19.14.49970, Platform Build 19.0.49925, so it looks safe — our inference, not a vendor statement
20.0.0 ≤ v < App Build 20.8.49971, Platform Build 20.0.4994721.0.0 ≤ v < App Build 21.2.49990, Platform Build 21.0.49984
Affected range stops below App Build 20.8.49971, Platform Build 20.0.49947, so it looks safe — our inference, not a vendor statement
Affected range stops below App Build 21.2.49990, Platform Build 21.0.49984, so it looks safe — our inference, not a vendor statement
1.0 ≤ v < 522041.0 ≤ v < 522971.0 ≤ v < Build 307121.0 ≤ v < Build 494971.0 ≤ v < Build 522031.0201620172018
Affected range stops below 52204, so it looks safe — our inference, not a vendor statement
Affected range stops below 52297, so it looks safe — our inference, not a vendor statement
Affected range stops below Build 30712, so it looks safe — our inference, not a vendor statement
Affected range stops below Build 49497, so it looks safe — our inference, not a vendor statement
Affected range stops below Build 52203, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
Vendor Advisory
Source: [email protected]
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41127CVSS
8.5HIGHmicrosoft
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card