fr Sign in

9.9 Critical

CVE-2026-47647 Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network

Description

Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Dynamics 365	Versions not published

References

Dynamics 365 Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published June 18, 2026
Last modified September 24, 2026

The 5 CVEs of Microsoft Dynamics 365 →

CVE-2018-8607 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly… Not rated CVE-2018-8608 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly… Not rated CVE-2018-8609 A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails… Not rated CVE-2018-8606 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly… Not rated

Track this CVE