CVE-2026-33103 - Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

MEDIUM

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Published Apr 14, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.35%

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
9.0.0	affected	<9.1.0044.0015

No remediation recorded yet.

Weaknesses (1)

CWE-284

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22627		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33103		vendor-advisorypatchVendor Advisory