3063 matches found
CVE-2026-77908
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-65772
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
EUVD-2026-73738
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-65772
CVE-2026-65772 is a deserialization of untrusted data flaw in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to execute code over a network. The CVSS 3.1 score is 8.8 (High) with high impact to confidentiality, integrity, and availability, and no user inter...
EUVD-2026-73294
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-77908
CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
PT-2026-87982
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service SaaS offerings through information technology IT help desk vishing, adversary-in-the-middle AitM token theft, and residential-proxy sign-ins...
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed details of a new adversary-in-the-middle AitM phishing toolkit called NovaCookies that's used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication...
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cybersecurity researchers have traced the continued evolution of the Cavern aka Cav3rn command-and-control C2 framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster...
Security Updates for Microsoft Dynamics 365 Business Central (August 2026)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...
CVE-2026-65815
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-66301
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
CVE-2026-66301
The provided connected records identify CVE-2026-66301 as an information disclosure vulnerability affecting Microsoft Dynamics 365 (on-premises). The attack surface involves a network exposure where an unauthorized actor can disclose sensitive information. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N...
