CVE Catalog

CVE-2026-65815

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.91%

57th percentile - higher than 57% of all known CVEs

Summary

Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Risk Assessment

An authorized user could exploit the vulnerability to execute code remotely on the Dynamics 365 server.

Recommendation

Apply security patches provided by Microsoft for Dynamics 365.

Original NVD description (English source)

Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS