CVE-2025-29807

CVE-2025-29807 is a remotely exploitable vulnerability affecting Microsoft Dataverse (and related Dynamics products) in which an attacker can trigger code execution by deserializing untrusted data. The issue is described as a Deserialization of untrusted data that allows an authorized attacker to...

CVE-2024-38139

Microsoft Dataverse contains an elevation of privilege vulnerability due to improper authentication. An authorized attacker could elevate privileges over the network. Affected component/function is Dataverse authentication/auth checks. Underlying impact includes high confidentiality and integrity...

CVE-2025-29826

CVE-2025-29826 is reported as a Microsoft Dataverse elevation-of-privilege vulnerability caused by improper handling of permissions. The initial description and multiple connected sources consistently identify Microsoft Dataverse as the affected product and an authorization-based privilege escala...