Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 373 respecto a la semana anterior

Críticas / altas1323▲ 43 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-59118	Modificada	Crítica (9.3)	0.72%	—	Microsoft Power Apps	7/8/2026	11/8/2026	Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-32172	Analizada	Alta (8)	0.57%	—	Microsoft Power Apps	23/4/2026	17/6/2026	Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.
CVE-2026-26149	Analizada	Crítica (9)	0.77%	—	Microsoft Power Apps	14/4/2026	17/6/2026	Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.
CVE-2026-20960	Analizada	Alta (8)	0.53%	—	Microsoft Power Apps	16/1/2026	17/6/2026	Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network.
CVE-2025-47733	Analizada	Alta (7.5)	2.0%	—	Microsoft Power Apps	8/5/2025	17/6/2026	Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network
CVE-2023-32052	Modificada	Media (5.4)	0.55%	—	Microsoft Power Apps	11/7/2023	17/6/2026	Microsoft Power Apps (online) Spoofing Vulnerability
CVE-2023-32024	Modificada	Baja (3)	1.5%	—	Microsoft Power Apps	14/6/2023	17/6/2026	Microsoft Power Apps Spoofing Vulnerability