Vulnerabilities of Microsoft Microsoft Power Apps

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-70213	Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network	8.0 High	Oct 13, 2026
CVE-2026-59118	Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network	9.3 Critical	Aug 6, 2026
CVE-2026-32172	Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network	8.0 High	Apr 23, 2026
CVE-2026-26149	Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to…	9.0 Critical	Apr 14, 2026
CVE-2026-20960	Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network	8.0 High	Jan 16, 2026
CVE-2025-47733	Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information…	9.1 Critical	May 8, 2025
CVE-2023-32052	Microsoft Power Apps (online) Spoofing Vulnerability	5.4 Medium	Jul 11, 2023
CVE-2023-32024	Microsoft Power Apps Spoofing Vulnerability	3.0 Low	Jun 14, 2023