EUVD-2026-25308

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

CVE-2026-32172

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability

...

CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability

...

CVE-2026-32172

Technical details for CVE-2026-32172 are not publicly available in the provided documents. Monitor for updates.

Microsoft Power Apps Desktop Client Spoofing Vulnerability

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...

KLA90979 OSI vulnerability in Microsoft Dynamics

An information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-33103 Exploitation Related products Microsoft-Dynamics-365 Microsoft-365 CVE list...

Microsoft Power Apps < 3.26032.10.0 Security Feature Bypass (April 2026)

The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26032.10.0. It is, therefore, affected by a security feature bypass vulnerability: - Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to...

CVE-2026-20960 PowerApps Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

PowerApps Desktop Client Remote Code Execution Vulnerability

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

PT-2026-3325

Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An improper authorization issue exists in Microsoft Power Apps. This allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no...

EUVD-2025-14047

Malicious code in bioql PyPI...

EUVD-2023-36311

Malicious code in bioql PyPI...

EUVD-2023-36339

Malicious code in bioql PyPI...

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-47733 Microsoft Power Apps Information Disclosure Vulnerability

...

CVE-2025-47733

CVE-2025-47733 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Power Apps that can allow an unauthenticated attacker to disclose information over the network. The issue is characterized as an information-disclosure vulnerability affecting Power Apps, with published advisories i...

CVE-2025-47733 Microsoft Power Apps Information Disclosure Vulnerability

...