Microsoft Data Formulator — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Data Formulator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-41094 — CVSS 8.8 (high): Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over…