Dataverse

4 CVEs product

Monthly

CVE-2025-29826 HIGH This Month

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Microsoft Information Disclosure Dataverse
NVD
CVSS 3.1
7.3
EPSS
0.7%
CVE-2025-47732 HIGH This Month

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Microsoft Deserialization Dataverse
NVD
CVSS 3.1
8.7
EPSS
2.7%
CVE-2025-29807 HIGH This Week

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection Deserialization Dataverse
NVD
CVSS 3.1
8.7
EPSS
1.0%
CVE-2025-24053 HIGH This Week

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Microsoft Authentication Bypass Dataverse
NVD
CVSS 3.1
7.2
EPSS
0.4%
CVE-2025-29826
EPSS 1% CVSS 7.3
HIGH This Month

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Microsoft Information Disclosure Dataverse
NVD
CVE-2025-47732
EPSS 3% CVSS 8.7
HIGH This Month

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Microsoft Deserialization Dataverse
NVD
CVE-2025-29807
EPSS 1% CVSS 8.7
HIGH This Week

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection +2
NVD
CVE-2025-24053
EPSS 0% CVSS 7.2
HIGH This Week

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Microsoft Authentication Bypass Dataverse
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy