High · 7.3 CVE-2024-35248 EUVD-2024-35759GHSA-f89r-fghx-493c

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Published Jun 11, 2024 · Updated Nov 3, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Product: Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Product: Microsoft Dynamics 365 Business Central 2024 Release Wave 1

Description

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 1	22.0.0 – < 23.0.18933	23.0.18933
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 2	23.0.0 – < 23.0.18933	23.0.18933
Microsoft	Microsoft Dynamics 365 Business Central 2024 Release Wave 1	24.0 – < 24.0.19487	24.0.19487

Advisories 3

MSRC-CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 20, 2026
WID-SEC-2024-1341 Microsoft Dynamics 365: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2024
NCSC-2024-0252 Kwetsbaarheden verholpen in Microsoft Dynamics NCSC-NL (Netherlands) · Jun 11, 2024

References

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability vendor-advisory patch