Patch tracker / CVE reference / CVE-2025-62206
CVE-2025-62206
Medium severity Microsoft vulnerability, CVSS 6.5. Fixed by 1 Microsoft security update.
Risk summary
Exploitation and severity
Not in the CISA KEV catalog. EPSS exploit probability <1%. CVSS 6.5 (Medium).
This CVE is among the lower half of tracked Microsoft CVEs by EPSS exploit probability.
What to do
Lower priority: patch in your normal cycle. In Intune or Defender, confirm whether the fixing update KB5067331 are installed across the affected products. Senserva does this automatically across your tenant and flags every missing patch.
Official patch for CVE-2025-62206
Apply the Microsoft security update below to fix CVE-2025-62206. Each KB page links to the Microsoft Update Catalog download for every affected product.
Affected products
- Microsoft Dynamics 365 (on-premises) version 9.1
Authoritative references
Want every Microsoft CVE and the patches that fix it, ranked by real-world risk? See the Microsoft Patch Tracker.