Advisories · Technology

Microsoft Power Pages.

Every CVE that names Microsoft Power Pages among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-23652 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Power Pages Remote Code Execution Vulnerability
- Microsoft Power Pages
- Command injection
Not analysed yet 22 May 2026
CVE-2025-47733 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Power Apps Information Disclosure Vulnerability
- Microsoft Power Pages
- Server-side request forgery (SSRF)
Not analysed yet 8 May 2025
CVE-2025-24989 CVE record

CVSS 8.2 HighCritical · KEVKEV

Microsoft Power Pages Elevation of Privilege Vulnerability
- Microsoft Power Pages
- Broken access control
Not analysed yet 19 Feb 2025