Microsoft Dynamics 365 und Microsoft Power Automate Desktop: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 8.8
  CVE-2026-65772

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

  Microsoft Microsoft Dynamics 365 (on-premises) version 9.1
  Sep 8, 2026
• High 8.8
  CVE-2026-77908

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

  Microsoft Microsoft Dynamics 365 Customer Engagement V9.1
  Sep 8, 2026
• High 7.0
  CVE-2026-77897

  Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

  Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

  Microsoft Power Automate for Desktop Power Automate agent for virtual desktops
  Sep 8, 2026

Revision history

1. 2026-09-08 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Microsoft Security Advisory CVE-2026-65772
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65772
• Microsoft Security Advisory CVE-2026-77908
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908
• Microsoft Security Advisory CVE-2026-65818
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65818
• Microsoft Security Advisory CVE-2026-77897
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897