3376 matches found
Security Updates for Microsoft Dynamics 365 Business Central (August 2026)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...
Vulnerabilities in Microsoft Dynamics
Microsoft has identified vulnerabilities in Dynamics, both online and on-premise. These vulnerabilities allow a malicious individual to gain elevated privileges, execute arbitrary code, and/or access sensitive data. The most severe vulnerability has been assigned the CVE-2026-59118 identifier and...
CVE-2026-66301
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
CVE-2026-65815
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-66301
The provided connected records identify CVE-2026-66301 as an information disclosure vulnerability affecting Microsoft Dynamics 365 (on-premises). The attack surface involves a network exposure where an unauthorized actor can disclose sensitive information. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N...
CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
EUVD-2026-56566
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
CVE-2026-65815
CVE-2026-65815 affects Microsoft Dynamics 365 On-Premises. The vulnerability arises from deserialization of untrusted data, enabling an authenticated attacker to execute code remotely over a network. Affected component is the on-premises Dynamics 365 deployment; the underlying root cause is impro...
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
EUVD-2026-56449
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-40375
CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
