Microsoft Dynamics_365
99 CVEs affecting Microsoft Dynamics_365. Latest disclosed: 2026-06-18. Critical: 5, High: 42.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-47647 | Critical | 9.9 | 2026-06-18 | Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network. |
CVE-2026-42898 | Critical | 9.9 | 2026-05-12 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. |
CVE-2026-32210 | Critical | 9.3 | 2026-04-23 | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-42833 | Critical | 9.1 | 2026-05-12 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. |
CVE-2024-38182 | Critical | 9.0 | 2024-07-31 | Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network. |
CVE-2026-40371 | High | 8.8 | 2026-06-09 | Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a… |
CVE-2022-35805 | High | 8.8 | 2022-09-13 | Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability |
CVE-2022-34700 | High | 8.8 | 2022-09-13 | Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability |
CVE-2022-23259 | High | 8.8 | 2022-04-15 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2021-42316 | High | 8.8 | 2021-11-10 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2020-17158 | High | 8.8 | 2020-12-10 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability |
CVE-2020-17152 | High | 8.8 | 2020-12-10 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability |
CVE-2019-1229 | High | 8.8 | 2019-08-14 | An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer… |
CVE-2018-8609 | High | 8.8 | 2018-11-14 | A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an af… |
CVE-2025-62211 | High | 8.7 | 2025-11-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to pe… |
CVE-2025-62210 | High | 8.7 | 2025-11-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to pe… |
CVE-2020-17147 | High | 8.7 | 2020-12-10 | Dynamics CRM Webclient Cross-site Scripting Vulnerability |
CVE-2024-38211 | High | 8.2 | 2024-08-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21395 | High | 8.2 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-35335 | High | 8.2 | 2023-07-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |