Microsoft Dynamics 365 (on-premises) version 9.1 vulnerabilities

3 known vulnerabilities in Microsoft Dynamics 365 (on-premises) version 9.1 from Microsoft. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft Dynamics 365 (on-premises) version 9.1: Improper Handling of Exceptional Conditions

  CVE-2026-40371Jun 9, 2026Microsoft

  Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.

• 9.9 Critical severity

  Microsoft Dynamics 365 (on-premises) version 9.1: Improper Control of Generation of Code

  CVE-2026-42898May 12, 2026MicrosoftEPSS 1.19%

  Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

• 9.1 Critical severity

  Microsoft Dynamics 365 (on-premises) version 9.1: Execution with Unnecessary Privileges

  CVE-2026-42833May 12, 2026Microsoft

  Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.