cve 2026 59118

This tag covers CVE-2026-59118, an elevation-of-privilege vulnerability in Microsoft Power Apps. As of the latest information, Microsoft has published the advisory but has not yet provided a customer-installable patch, build number, CVSS score, or exploitability assessment. The practical guidance for Power Platform administrators is to treat this as a cloud-service security change, identify business-critical Power Apps and Dataverse environments, and monitor the Power Platform admin center and Microsoft 365 Message Center for rollout notices. The advisory was published in Microsoft's Security Update Guide on August 6, 2026, and does not involve Windows Update or WSUS patches.