CVE-2026-77897

CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...

CVE-2026-69459

CVE-2026-69459 is a heap-based buffer overflow in the Windows Power Dependency Coordinator that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS v3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege access i...

EUVD-2026-73512

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...

CVE-2026-69321

CVE-2026-69321 affects Windows Power Dependency Coordinator , a Windows system component. The root cause is missing authentication for a critical function, which allows a locally authenticated attacker with low privileges to perform tampering (integrity impact). The CVSS 3.1 score is 5.5 (Medium)...

EUVD-2026-73442

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

Windows Power Dependency Coordinator Tampering Vulnerability

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

Power Automate Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...

Denial Of Service (DoS)

Spring Framework is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing of the SpEL power operator ^ with BigDecimal or BigInteger operands and large exponent values, which allows an attacker to supply a crafted expression that consumes excessive CPU and memory...

CVE-2026-77897: Relative Path Traversal

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

PT-2026-87974

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

KLA91267 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Dynamics 365...

PT-2026-87365

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

CVE-2026-69321: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

CVE-2026-69459: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...

PT-2026-87485

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...

CVE-2026-20508

In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012...

CVE-2026-20509

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

EUVD-2026-72202

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...