← back
CVE-2026-59118criticalCWE-285

Microsoft Power Apps Elevation of Privilege Vulnerability

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3
exploitation probability
observed exploitation
nono source reports it
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C