← Database

CVE-2025-29826

HIGH CVSS: 7.3 Published: 2025-05-13 Modified: 2026-06-17

Description

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Dataverse

Weakness Type

CWE-280, CWE-755

References