Advisories · Technology

Microsoft Power Platform.

Every CVE that names Microsoft Power Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65818 CVE record

CVSS 8.5 High

Power Automate Elevation of Privilege Vulnerability
- Microsoft Power Platform
- Server-side request forgery (SSRF)
Not analysed yet 3 Sept 2026
CVE-2024-38190 CVE record

CVSS 8.6 High

Power Platform Information Disclosure Vulnerability
- Microsoft Power Platform
- Broken access control
Not analysed yet 15 Oct 2024
CVE-2024-35260 CVE record

CVSS 8.0 High

Microsoft Dataverse Remote Code Execution Vulnerability
- Microsoft Power Platform
- CWE-426
Not analysed yet 27 Jun 2024
CVE-2023-36019 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Power Platform Connector Spoofing Vulnerability
- Microsoft Power Platform
- Microsoft Azure Logic Apps
- Path traversal
Not analysed yet 12 Dec 2023