Skip to content
OpenAdvisories

Product · Microsoft

Microsoft Power Platform

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2026-65818

    Power Automate Elevation of Privilege Vulnerability

    Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Power Platform
  • High 8.6
    CVE-2024-38190

    Power Platform Information Disclosure Vulnerability

    Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.

    Microsoft Microsoft Power Platform
  • High 8.0
    CVE-2024-35260

    Microsoft Dataverse Remote Code Execution Vulnerability

    An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.

    Microsoft Microsoft Power Platform