91 matches found
Microsoft Power Automate for Desktop < 2.71.115.26224 Elevation of Privilege (September 2026)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is prior to 2.71.115.26224. It is, therefore, affected by an elevation of privilege vulnerability. Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. Note...
Vulnerabilities in Microsoft Dynamics
Microsoft has patched 2 vulnerabilities in Dynamics, both for online and on-premise environments. These vulnerabilities allow malicious actors to gain elevated privileges, execute arbitrary code, and/or access sensitive data. Microsoft Dynamics 365: | CVE-ID | CVSS | Impact |...
CVE-2026-77897
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
EUVD-2026-73887
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
CVE-2026-77897
CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
Power Automate Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
CVE-2026-77897: Relative Path Traversal
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
PT-2026-87974
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
KLA91267 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Dynamics 365...
EUVD-2026-70797
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
CVE-2026-65818
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
CVE-2026-65818
CVE-2026-65818 is a server-side request forgery (SSRF) vulnerability in Microsoft Power Automate that allows an authorized attacker to elevate privileges over a network . NVD rates it CRITICAL (9.9) with changed scope and high impact to confidentiality, integrity, and availability; Microsoft's CN...
CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability
...
CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability
...
PT-2026-85309
Name of the Vulnerable Software and Affected Versions Microsoft Power Automate affected versions not specified Description Insufficient validation of server-side requests leads to a server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an...
CVE-2026-65818: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
The vulnerability of the Power Automate for Desktop automation platform, related to insufficient protection of operational data, allows a hacker to disclose protected information.
The vulnerability of the Power Automate for Desktop automation platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Microsoft Power Automate for Desktop < 2.68.237.26118 Information Disclosure (May 2026)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is prior to 2.68.237.26118. It is, therefore, affected by an information disclosure vulnerability: - Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker ...
