Multiple vulnerabilities in Microsoft Dynamics

Description

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Power Apps can be exploited remotely to execute arbitrary code.
2. A spoofing vulnerability in Microsoft Dynamics 365 (online) can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-32172

• CVE-2026-32210

Exploitation

Related products

• Microsoft-Dynamics-365
• Microsoft-365

CVE list

• CVE-2026-32172
  critical
• CVE-2026-32210
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com