Microsoft Security Response Center guidance
Vendor revision: Aug 11, 2026Release Notes
Vendor-listed releases
- 9.1.0047.0006
Vulnerability intelligence
CVE-2026-65815 and is rated High severity with a CVSS score of 8.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
Vendor-listed releases
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
Source: NVD