Medium severity5.5NVD Advisory· Published Apr 14, 2026· Updated Jul 24, 2026
CVE-2026-33103
CVE-2026-33103
Description
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.
Affected products
2(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*range: >=9.0,<9.1.44.15
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33103nvdVendor Advisory
News mentions
1- Patch Tuesday - April 2026Rapid7 Blog · Apr 14, 2026