Skip to content

Vulnerabilities of Microsoft Microsoft Power Platform

Is your version affected?

CVE Summary Score Published
CVE-2026-65818 Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network 8.5 High Sep 3, 2026
CVE-2024-38190 Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a… 8.6 High Oct 15, 2024
CVE-2024-35260 An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over… 8.0 High Jun 27, 2024
CVE-2023-36019 Microsoft Power Platform Connector Spoofing Vulnerability 9.6 Critical Dec 12, 2023

Other Microsoft products