Veille CVE

Recherche « Microsoft Dynamics 365 »

12 CVE

Critique 4 Élevée 5 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Dynamics 365 » ✕
  1. CVE-2026-77908 8.8 Élevée

    Microsoft Dynamics 365 Customer Engagement V9.1 · Microsoft dynamics 365

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

  2. CVE-2026-65772 8.8 Élevée

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

  3. CVE-2026-66301 6.5 Moyenne

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.

  4. CVE-2026-65815 8.8 Élevée

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

  5. CVE-2026-40375 6.5 Moyenne

    Microsoft Dynamics 365 Business Central 2024 Release Wave 2 · Microsoft Dynamics 365 Business Central 2026 Release Wave 1 · Microsoft Dynamics 365 Business Central Release Wave 1 2025 · Microsoft Dynamics 365 Business Central Release Wave 2 2025

    Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

  6. CVE-2026-47646 6.1 Moyenne

    Microsoft Dynamics 365 Customer Voice

    Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network.

  7. CVE-2026-47647 9.9 Critique

    Microsoft Dynamics 365

    Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

  8. CVE-2026-40371 8.8 Élevée

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.

  9. CVE-2026-42898 9.9 Critique

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

  10. CVE-2026-42833 9.1 Critique

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

  11. CVE-2026-40417 7.8 Élevée

    Microsoft Dynamics 365 Business Central 2024 Release Wave 2 · Microsoft Dynamics 365 Business Central 2026 Release Wave 1 · Microsoft Dynamics 365 Business Central Release Wave 1 2025 · Microsoft Dynamics 365 Business Central Release Wave 2 2025

    Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-33821 9.9 Critique

    Microsoft Dynamics 365 · Microsoft dynamics 365 customer insights

    Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.