7.3
High
CVE-2025-29826 Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to…
Description
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dataverse 3.4 | earliest → < 3.4.0.1406 | 3.4.0.1406 |
References
- Microsoft Dataverse Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Dataverse
The 7 CVEs of Microsoft Dataverse →
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network
9.8
Critical
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a…
9.0
Critical
CVE-2025-47732
Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network
8.7
High
CVE-2025-29807
Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network
8.7
High