Known Vulnerabilities for 365 Apps by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "365 Apps" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58192 json | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-58191 json | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-56337 json | Capgo before 12.128.2 contains an information disclosure vulnerability in the public.exist_app_v2 RPC function that allows un... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56325 json | Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolv... | Not Provided | 2026-06-20 | 2026-06-22 |
| CVE-2026-56319 json | Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that allow... | Not Provided | 2026-06-20 | 2026-06-22 |
| CVE-2026-56309 json | Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attachments endpoint, allowing plan-block... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-56300 json | Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and get_org_perm_for_apikey that ex... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56257 json | Capgo before 12.128.2 allows direct patching of public.apps.owner_org through PostgREST, bypassing the transfer_app() workflo... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-56229 json | Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allo... | Not Provided | 2026-06-21 | 2026-06-22 |
| CVE-2026-55884 json | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 through 0.37.3, the Tilt HUD HTTP serv... | Not Provided | 2026-07-10 | 2026-07-10 |