What is CVE-2024-35263?

CVE-2024-35263 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Which CVE IDs does CVE-2024-35263 cover?

CVE-2024-35263 covers the following CVE IDs: CVE-2024-35263. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2024-35263?

CVE-2024-35263 has a CVSS v3 base score of 5.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2024-35263?

CVE-2024-35263 affects 1 product, including: Microsoft Dynamics 365 (on-premises) version 9.1.

CVE-2024-35263HighCVSS 5.7

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

July 20, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2024-35263 →

📋 Description

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

What type of information could be disclosed by this vulnerability? This vulnerability allows exfiltration of all the data that the logged-in user can access.

🎯 Affected products1

Microsoft Dynamics 365 (on-premises) version 9.1

✅ Remediation

KB5039459 (Security Update) — fixed build 1.29

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263
patchhttps://www.microsoft.com/download/details.aspx?familyid=9b7950ad-00d1-41d4-9f9b-c516b0ad42dd
referencehttps://support.microsoft.com/help/5039459