Dynamics 365 Business Central 2024 CVEs and Security Vulnerabilities

CVE-2026-40375

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central 2023 Wave 2 Dynamics 365 Business Central 2024 Dynamics 365 Business Central 2024 Wave 1 and 5 more

CVE-2024-35248

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2023 Dynamics 365 Business Central 2024

CVE-2024-38225

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2023 Dynamics 365 Business Central 2024

CVE-2026-40417

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2024 Dynamics 365 Business Central 2024 Wave 1 and 5 more

CVE-2025-29821

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central 2023 Dynamics 365 Business Central 2023 Wave 2 Dynamics 365 Business Central 2024 and 4 more

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 3.4% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2023 Dynamics 365 Business Central 2024

Search vulnerabilities

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability