To see the detailed list of fixes information for *Security fixes and *Accessibility fixes.with released Dynamics 365 cumulative updates and upcoming releases.It is always mentioning about the Bug fixes in detailed but not for the *Security fixes and *Accessibility fixes. if this list if available means, by reviewing we can say which release cumulative update provided fix for IT security compliance findings.

https://support.microsoft.com/en-us/topic/microsoft-dynamics-365-on-premises-cumulative-updates-ed51f905-cf4e-3641-dc7c-afe2b868eeb9