Known vulnerabilities in Microsoft Dynamics 365 (on-premises)

Vendor: Microsoft
Software: Microsoft Dynamics 365 (on-premises)
Software CPE: cpe:2.3:a:microsoft:microsoft_dynamics_365_on-premises:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Dynamics 365 (on-premises) Microsoft Dynamics 365 (on-premises) is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134190 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-40371		 CWE-280 Medium
No
No
 9.1 Train 26062 06.2 10.06.2026 SB2026061031
#VU131328 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-42898		 CWE-94 Medium
No
No
 9.1.44.15 13.05.2026 SB2026051361
#VU131327 - Execution with Unnecessary Privileges
CVE-2026-42833		 CWE-250 Low
No
No
 9.1.44.15 13.05.2026 SB2026051361