Skip to content

Vulnerabilities of Microsoft Microsoft Power Apps

Is your version affected?

CVE Summary Score Published
CVE-2026-59118 Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network 9.3 Critical Aug 6, 2026
CVE-2026-26149 Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to… 9.0 Critical Apr 14, 2026
CVE-2025-47733 Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information… 9.1 Critical May 8, 2025

Other Microsoft products