Multiple vulnerabilities in Microsoft Dynamics

Description

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Dynamics 365 Field Service (online) can be exploited remotely to spoof user interface.
2. An information disclosure vulnerability in Microsoft Dynamics 365 (On-Premises) can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2025-62211

• CVE-2025-62210
• CVE-2025-62206

Related products

• Microsoft-Dynamics-365
• Microsoft-365

CVE list

• CVE-2025-62206
  high
• CVE-2025-62210
  critical
• CVE-2025-62211
  critical

KB list

• 5067331

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com