VDB

CVE-2026-40417

CVE-2026-40417 PUBLISHED CVSS 7.800000190734863 HIGH

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

EPSS 0.04% · 14.4th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
0.04%
14.4th percentile

Affected Products

VendorProductVersions
MicrosoftMicrosoft Dynamics 365 Business Central 2024 Release Wave 225.0, 25.0, 25.0
microsoftdynamics_365_business_central_202628.0, 28.0, 28.0
MicrosoftMicrosoft Dynamics 365 Business Central 2026 Release Wave 128.0, 28.0, 28.0
MicrosoftMicrosoft Dynamics 365 Business Central Release Wave 1 202526.0, 26.0, 26.0
MicrosoftN/A
MicrosoftMicrosoft Dynamics 365 Business Central Release Wave 2 202527.0, 27.0, 27.0
microsoftdynamics_365_business_central_202527.0, 26.0, 27.0
microsoftdynamics_365_business_central_202425.0, 25.0, 25.0

Timeline

  • May 12, 2026 PoC Published
  • May 12, 2026 PoC Published
  • May 12, 2026 CVE Published
  • May 13, 2026 PoC Published
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory

References

…and 15 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›