High · 8.8 CVE-2024-35249 EUVD-2024-35760GHSA-p82x-8jgq-h8r2

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Published Jun 11, 2024 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Product: Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Product: Microsoft Dynamics 365 Business Central 2024 Release Wave 1

Description

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 1	22.0.0 – < 22.0.64336	22.0.64336
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 2	23.0.0 – < 23.0.18933	23.0.18933
Microsoft	Microsoft Dynamics 365 Business Central 2024 Release Wave 1	24.0 – < 24.0.19487	24.0.19487

Advisories 3

MSRC-CVE-2024-35249 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Microsoft Security Response Center · Aug 10, 2026
WID-SEC-2024-1341 Microsoft Dynamics 365: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2024
NCSC-2024-0252 Kwetsbaarheden verholpen in Microsoft Dynamics NCSC-NL (Netherlands) · Jun 11, 2024

References

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability vendor-advisory patch