Microsoft Power Apps vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Power Apps: 5 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:power_apps

CVE-2026-70213 High · 8.0 CWE-346 Oct 13, 2026

Microsoft Power Apps Remote Code Execution Vulnerability

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

CVE-2026-59118 Critical · 9.3 CWE-285 Aug 6, 2026

Copilot Cowork Elevation of Privilege Vulnerability

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-32172 High · 8.0 CWE-427 Apr 23, 2026

Microsoft Power Apps Remote Code Execution Vulnerability

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.

CVE-2026-26149 Critical · 9.0 CWE-150 Apr 14, 2026

Microsoft Power Apps Desktop Client Spoofing Vulnerability

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.

CVE-2026-20960 High · 8.0 CWE-863 Jan 16, 2026

PowerApps Desktop Client Remote Code Execution Vulnerability

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network.