Microsoft Microsoft Power Platform
4 CVEs affecting Microsoft Microsoft Power Platform. Latest disclosed: 2026-09-03. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36019 | Critical | 9.6 | 2023-12-12 | Microsoft Power Platform Connector Spoofing Vulnerability |
CVE-2024-38190 | High | 8.6 | 2024-10-15 | Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector. |
CVE-2026-65818 | High | 8.5 | 2026-09-03 | Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. |
CVE-2024-35260 | High | 8.0 | 2024-06-27 | An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network. |