← Database

CVE-2026-59118

CRITICAL CVSS: 9.3 Published: 2026-08-07 Modified: 2026-08-11

Description

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Power Apps

Weakness Type

CWE-285

References