CVE-2025-47732 is a critical deserialization of untrusted data vulnerability affecting Microsoft Dataverse, allowing an authorized attacker to execute arbitrary code remotely over a network. With a CVSS score of 9.8, this flaw presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability without user interaction. While there is no public exploit code or active exploitation confirmed, the vulnerability has garnered significant community discussion and media attention, indicating a high level of interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:dataverse:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.