CVE Intelligence

Vulnerabilidades do Microsoft Dynamics 365

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Dynamics 365: 11 registro(s), com versões afetadas e correções.
cpe:2.3:a:microsoft:dynamics_365

CVE-2026-65772 Alta · 8.8 CWE-502 08/09/2026
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
CVE-2026-47647 Crítica · 9.9 CWE-284 18/06/2026
Microsoft Dynamics 365: controle de acesso inadequado permite elevação de privilégios (CVE-2026-47647)
Controle de acesso inadequado no Microsoft Dynamics 365 permite que um atacante autorizado eleve privilégios pela rede.
CVE-2026-40371 Alta · 8.8 CWE-755 09/06/2026
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.
CVE-2026-42898 Crítica · 9.9 CWE-94 12/05/2026
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
CVE-2026-42833 Crítica · 9.1 CWE-250 12/05/2026
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
CVE-2026-33821 Crítica · 9.9 CWE-269 12/05/2026
Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.
CVE-2026-32210 Alta · 7.5 CWE-918 23/04/2026
Microsoft Dynamics 365 (online) Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33103 Média · 5.5 CWE-284 14/04/2026
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.
CVE-2025-62211 Alta · 8.7 CWE-79 11/11/2025
Dynamics 365 Field Service (online) Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.
CVE-2025-62210 Alta · 8.7 CWE-79 11/11/2025
Dynamics 365 Field Service (online) Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.
CVE-2025-62206 Média · 6.5 CWE-200 11/11/2025
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.