42 matches found
The vulnerability of the Microsoft Power Apps development environment, related to incorrect authentication, allows a perpetrator to increase their privileges.
The vulnerability of the Microsoft Power Apps development environment is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2026-59118 Copilot Cowork Elevation of Privilege Vulnerability
...
KLA91192 PE vulnerability in Microsoft Dynamics
Privilege escalation vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-59118 Exploitation Related products .NET Microsoft-Power-Apps-Desktop-Client CVE list CVE-2026-59118 unknown KB list Solution Install...
PT-2026-68830
Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about ...
EUVD-2026-25308
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...
CVE-2026-32172
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...
CVE-2026-32172
Technical details for CVE-2026-32172 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability
...
CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability
...
Microsoft Power Apps Desktop Client Spoofing Vulnerability
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...
Microsoft Power Apps < 3.26032.10.0 Security Feature Bypass (April 2026)
The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26032.10.0. It is, therefore, affected by a security feature bypass vulnerability: - Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to...
KLA90979 OSI vulnerability in Microsoft Dynamics
An information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-33103 Exploitation Related products Microsoft-Dynamics-365 Microsoft-365 CVE list...
CVE-2026-20960
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...
CVE-2026-20960 PowerApps Desktop Client Remote Code Execution Vulnerability
...
PowerApps Desktop Client Remote Code Execution Vulnerability
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...
PT-2026-3325
Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An improper authorization issue exists in Microsoft Power Apps. This allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no...
EUVD-2023-36339
Malicious code in bioql PyPI...
EUVD-2023-36311
Malicious code in bioql PyPI...