microsoft power apps

Name: microsoft power apps
Brand: microsoft

productUS

cpe:2.3:a:microsoft:power_apps:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-47733US	high7.5	1.99% (81st)	—	no fix	2025-05-08	—
CVE-2023-32024US	—	1.49% (74th)	—	no fix	2023-06-14	—
CVE-2026-59118US	—	0.72% (54th)	—	no fix	2026-08-07	—
CVE-2026-26149US	—	0.56% (47th)	—	3.26032.10.0	2026-04-14	< 3.26032.10.0
CVE-2023-32052US	—	0.55% (46th)	—	9.2.23042	2023-07-11	< 9.2.23042
CVE-2026-20960US	—OT elevated	0.53% (44th)	—	3.25121	2026-01-16	< 3.25121
CVE-2026-32172US	—	0.34% (27th)	—	no fix	2026-04-23	—

The flaw types (CWEs) most of these CVEs share.

CWE-285Improper Authorization2 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.