ACE vulnerability in Microsoft Dynamics

Description

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Dataverse can be exploited remotely to execute arbitrary code.
2. An information disclosure vulnerability in Microsoft Power Apps can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2025-47732

• CVE-2025-47733

Exploitation

Related products

• Dynamics-CRM-Service

CVE list

• CVE-2025-47732
  critical
• CVE-2025-47733
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com