CVE Catalog
CVE-2026-33103
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.22%
13th percentile - higher than 13% of all known CVEs
Summary
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential local disclosure of sensitive information by an authorized user, which could compromise data confidentiality.
Recommendation
It is recommended to apply the appropriate patches provided by Microsoft and review access control configurations.
Original NVD description (English source)
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.