The vulnerability is an improper privilege management flaw in Microsoft Dynamics 365 Customer Insights. It allows an attacker who already has authorized access to the system to expand their privileges across the network, granting them permissions beyond those originally granted. This can undermine data integrity, confidentiality, and availability by enabling further malicious actions such as data exfiltration or unauthorized configuration changes.

Affected software is Microsoft Dynamics 365 Customer Insights. No specific affected versions are listed in the advisory, so any deployment that has not applied the latest security updates may be vulnerable.

The CVSS score of 7.7 reflects a high severity of this privilege escalation. EPSS is not available, so the current likelihood of exploitation is unknown, and the vulnerability is not yet listed in the CISA KEV catalog. Based on the description, the likely attack vector is an authorized attacker exploiting the system over the network, such that the attacker must first authenticate or gain authorized access before taking advantage of the privilege escalation. When the flaw is exploited, it can result in a system-wide compromise within the network.