CVE-2026-40371 — Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.
Published: 2026-06-09 · CVSS: 8.8 · CVSS 3.1
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7