Patch tracker / Products / Microsoft Dynamics 365 (on-premises) version 9.1

Microsoft Dynamics 365 (on-premises) version 9.1: vulnerabilities and security updates

Every CVE affecting Microsoft Dynamics 365 (on-premises) version 9.1 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
9
Updates (KBs)
7
Actively exploited (KEV)
0
Critical Severity
2

CVEs affecting Microsoft Dynamics 365 (on-premises) version 9.1

CVESeverityCVSSEPSSStatus
CVE-2026-42898Critical9.91.2%-
CVE-2026-42833Critical9.11.2%-
CVE-2024-38211High8.21.0%-
CVE-2024-43476High7.60.9%-
CVE-2024-30061High7.31.4%-
CVE-2025-53728Medium6.51.2%-
CVE-2025-62206Medium6.50.9%-
CVE-2026-33103Medium5.51.2%-
CVE-2025-49745Medium5.40.5%-

Updates (KBs) for Microsoft Dynamics 365 (on-premises) version 9.1

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50789432026-05-12Critical9.91.2%3-
KB50415572024-08-13High8.21.0%1-
KB50432542024-09-10High7.60.9%1-
KB50379402024-07-09High7.31.4%1-
KB50644832025-08-12Medium6.51.2%1-
KB50673312025-11-11Medium6.50.9%1-
KB50590862025-08-12Medium5.40.5%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list KB5099539 install notes and severity CVE-2026-53412 exploit status KB5101650 download and what it fixes KB5120708 install notes and severity CVE-2026-55040 exploit status KB5101001: patch details KB5094128: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.