Dataverse (Microsoft) - vulnerabilities (CVEs)

7 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-08. Vendor: Microsoft.

CVEs of Dataverse

• CVE-2026-88131 - CVSS 9.8 (critical), 2026-10-08: Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
• CVE-2026-77903 - CVSS 9 (critical), 2026-09-17: Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-29826 - CVSS 8.8 (high), 2025-05-13: Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
• CVE-2025-47732 - CVSS 9.8 (critical), 2025-05-08: Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.
• CVE-2025-29807 - CVSS 8.8 (high), 2025-03-21: Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.
• CVE-2025-24053 - CVSS 7.2 (high), 2025-03-13: Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
• CVE-2024-38139 - CVSS 8.8 (high), 2024-10-15: Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.