← Database

CVE-2025-29807

HIGH CVSS: 8.7 Published: 2025-03-21 Modified: 2026-06-17

Description

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

Affected Platforms

Microsoft Dataverse

Weakness Type

CWE-94, CWE-502

References