BaselineWatch
61084 CVEs · 136 in KEV
Desk
CVEs known61,084 New, 24 h187 Changed, 24 h199 In KEV136 Public exploit1,656 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-33821 9.9 critical 1.0% microsoft, dynamics_365_customer_insights Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network. Mon 26 Oct
CVE-2026-42898 9.9 critical 1.0% microsoft, dynamics_365 Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. Mon 26 Oct
CVE-2026-47647 9.9 critical 1.0% microsoft, dynamics_365 Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network. 26 Oct
CVE-2026-42833 9.1 critical 1.0% microsoft, dynamics_365 Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. Mon 26 Oct

4 of 4

Download these 4 as CSV · subscribe to this list.

EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.