80 matches found
Vulnerabilities in Microsoft Dynamics
Microsoft has patched 2 vulnerabilities in Dynamics, both for online and on-premise environments. These vulnerabilities allow malicious actors to gain elevated privileges, execute arbitrary code, and/or access sensitive data. Microsoft Dynamics 365: | CVE-ID | CVSS | Impact |...
CVE-2026-77897
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
EUVD-2026-73887
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
CVE-2026-77897
CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
Power Automate Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
KLA91267 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Dynamics 365...
EUVD-2026-70797
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
CVE-2026-65818
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
CVE-2026-65818
CVE-2026-65818 is a server-side request forgery (SSRF) vulnerability in Microsoft Power Automate that allows an authorized attacker to elevate privileges over a network . NVD rates it CRITICAL (9.9) with changed scope and high impact to confidentiality, integrity, and availability; Microsoft's CN...
CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability
...
CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability
...
PT-2026-85309
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
Microsoft Power Automate for Desktop < 2.68.237.26118 Information Disclosure (May 2026)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is prior to 2.68.237.26118. It is, therefore, affected by an information disclosure vulnerability: - Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker ...
CVE-2026-40374
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...
EUVD-2026-29653
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2026-40374
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2026-40374
CVE-2026-40374 concerns Exposure of sensitive information to an unauthorized actor in Power Automate Desktop. The connected documents indicate an information disclosure vulnerability affecting Power Automate Desktop, with a CVSS v3.1 base score of 6.5 (NETWORK, LOW attack complexity, PRIVILEGES R...
