Known vulnerabilities in Microsoft Dynamics 365 (on-premises) version 9.1
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-65772 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network | 8.8 High | Sep 8, 2026 |
| CVE-2026-66301 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an… | 6.5 Medium | Aug 11, 2026 |
| CVE-2026-65815 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute… | 8.8 High | Aug 11, 2026 |
| CVE-2026-40371 | Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized… | 8.8 High | Jun 9, 2026 |
| CVE-2026-42833 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized… | 9.1 Critical | May 12, 2026 |
| CVE-2026-42898 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized… | 9.9 Critical | May 12, 2026 |
| CVE-2025-62206 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an… | 6.5 Medium | Nov 11, 2025 |
| CVE-2025-53728 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an… | 6.5 Medium | Aug 12, 2025 |
| CVE-2025-49745 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365… | 5.4 Medium | Aug 12, 2025 |
| CVE-2024-43476 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Sep 10, 2024 |
| CVE-2024-38211 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 8.2 High | Aug 13, 2024 |
| CVE-2024-30061 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | 7.3 High | Jul 9, 2024 |
| CVE-2024-35263 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | 5.7 Medium | Jun 11, 2024 |
| CVE-2024-21419 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Mar 12, 2024 |
| CVE-2024-21395 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 8.2 High | Feb 13, 2024 |
| CVE-2024-21328 | Dynamics 365 Sales Spoofing Vulnerability | 7.6 High | Feb 13, 2024 |
| CVE-2024-21396 | Dynamics 365 Sales Spoofing Vulnerability | 7.6 High | Feb 13, 2024 |
| CVE-2024-21394 | Dynamics 365 Field Service Spoofing Vulnerability | 7.6 High | Feb 13, 2024 |
| CVE-2024-21393 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Feb 13, 2024 |
| CVE-2024-21389 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Feb 13, 2024 |
| CVE-2023-36020 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Dec 12, 2023 |
| CVE-2023-36016 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 6.2 Medium | Nov 14, 2023 |
| CVE-2023-36031 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Nov 14, 2023 |
| CVE-2023-36030 | Microsoft Dynamics 365 Sales Spoofing Vulnerability | 6.1 Medium | Nov 14, 2023 |
| CVE-2023-36410 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 7.6 High | Nov 14, 2023 |
Other Microsoft products
Windows Server 2019 5745
Windows Server 2019 (Server Core installation) 5648
Windows 10 Version 1809 5349
Windows Server 2022 5112
Windows Server 2016 5051
Windows Server 2016 (Server Core installation) 4847
Windows 10 Version 21H2 4539
Windows 10 Version 1607 4535
Windows Server 2012 R2 4103
Windows 10 Version 22H2 4041
Windows Server 2012 R2 (Server Core installation) 3958
Windows Server 2012 3865