← Database

CVE-2026-40371

HIGH CVSS: 8.8 Published: 2026-06-09 Modified: 2026-07-23

Description

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Dynamics 365

Weakness Type

CWE-280, CWE-755

References