HarborGuard / CVE
Back to search
HIGHCVE-2026-20960Published Modified CNA microsoft

CVE-2026-20960: PowerApps Desktop Client Remote Code Execution Vulnerability

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network.

Metrics

CVSS v3.1
8.0
Severity
HIGH
Fixed in
25121
Affected Products
1

Fix available

25121
Patch commits
Affected packages
  • Microsoft / Microsoft Power Apps Desktop Client
    < 25121 (from 1.0.0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References