power_apps vulnerabilities
CVEs whose affected-version data names the power_apps package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-70213High· 8.0Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
▾ TwilightMicrosoft · Microsoft Power AppsEPSS 0.39%via NVD
CVE-2026-32172High· 8.0Microsoft Power Apps Remote Code Execution Vulnerability
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.
▾ TwilightMicrosoft · Microsoft Power AppsEPSS 0.34%via CVEORG