3635 matches found
Microsoft Dynamics 365 (on-premises 权限许可和访问控制问题漏洞
Microsoft Dynamics 365 is a ERP business solution developed by the American company Microsoft, designed for multinational enterprises. It is used for financial management, production management, and business intelligence management, among other purposes. There are security vulnerabilities in...
PT-2026-47868
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...
KLA91092 PE vulnerability in Microsoft Dynamics
Privilege escalation vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-40371 Exploitation Related products Microsoft-Dynamics-365 Microsoft-365 CVE list CVE-2026-40371 critical Solution Install necessary...
CVE-2026-40371: Improper Handling of Insufficient Permissions or Privileges
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...
Google Chrome 竞争条件问题漏洞
Google Chrome is a web browser developed by the American company Google. Google Chrome has a vulnerability related to competition conditions, which stems from issues involving competition dynamics...
A Surveillance Evasion Game with Continuous Sensor Redeployment Via Bilevel Optimization
Uncrewed Aerial Systems UASs have become a growing threat to the security of critical infrastructure, exploiting spatiotemporal gaps in sensor perimeters to infiltrate restricted airspace undetected. We formulate this interaction as a two-player zero-sum differential game between an adversarial U...
KLA91069 ACE vulnerability in Microsoft Dynamics
A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-23652 Exploitation CVE list CVE-2026-23652 critical KB list Solution Install necessary updates from the KB section, that ar...
Microsoft Dynamics 365 (on-premises) < 9.1.45.11 Multiple RCE (May 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities: - Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a...
Security Updates for Microsoft Dynamics 365 Business Central (May 2026) (CVE-2026-40417)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability: - Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. CVE-2026-40417 Note that Nessus...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in insufficient validation of queries on the server side, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient testing of server-side queries. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...
The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2026-42898
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-42833
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-40417
Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally...
CVE-2026-33821
Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network...
The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in privilege management, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
EUVD-2026-29713
Execution with unnecessary privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...