AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-47646

Microsoft Dynamics 365 Customer Voice: cross-site scripting

Microsoft

CVE-2026-47646 · Published Jul 9, 2026

Critical9.3
No fix yet
Microsoft advisory

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network.

Affected versions

PackageAffectedFixed in
Dynamics 365 Customer Voice
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-79

More Microsoft advisories

All Microsoft
Medium 5.5Jul 14Microsoft Windows Media: information disclosureCVE-2026-34349fixed in 10.0.17763.9020 +7Medium 6.5Jul 14Microsoft Windows Event Logging Service: protection mechanism failureCVE-2026-34348fixed in 10.0.17763.9020 +8Medium 5.5Jul 14Microsoft Windows Ancillary Function Driver for WinSock: cleartext secretsCVE-2026-34346fixed in 10.0.14393.9339 +9High 8.3Jul 12Microsoft Edge (Chromium-based): privilege escalationCVE-2026-58596fixed in 150.0.4078.48High 8.3Jul 11Microsoft Edge (Chromium-based): unsafe deserializationCVE-2026-58281fixed in 150.0.4078.48High 8.2Jul 8Microsoft Edge (Chromium-based): improper access controlCVE-2026-58525fixed in 150.0.4078.50