91 matches found
CVE-2025-21187
Microsoft Power Automate Remote Code Execution Vulnerability...
CVE-2025-21187
Microsoft Power Automate Remote Code Execution Vulnerability...
CVE-2025-21187 Microsoft Power Automate Remote Code Execution Vulnerability
...
CVE-2025-21187 Microsoft Power Automate Remote Code Execution Vulnerability
...
CVE-2025-21187
CVE-2025-21187 corresponds to a Microsoft Power Automate Remote Code Execution vulnerability. Connected sources indicate exploitation requires a user to open a rogue file, enabling code execution in the caller’s context. A fix has been released and Microsoft states the vulnerability was addressed...
Microsoft Power Automate Remote Code Execution Vulnerability
...
CVE-2025-21187: Improper Control of Generation of Code
Microsoft Power Automate Remote Code Execution Vulnerability...
Microsoft Power Automate 代码注入漏洞
Microsoft Power Automate is a low-code automation platform from Microsoft USA that allows users to create automated workflows that connect and integrate various applications and services. A code injection vulnerability exists in Microsoft Power Automate. An attacker exploiting this vulnerability...
PT-2025-1218 · Microsoft · Power Automate
Name of the Vulnerable Software and Affected Versions: Microsoft Power Automate affected versions not specified Description: The issue is related to incorrect code generation management in the Power Automate platform. Exploitation of this issue may allow an attacker to execute arbitrary code...
Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is If your current version is 2.46.x 2.46.184.25013, 2.47.x 2.47.126.25010, 2.48.x 2.48.164.25010, 2.49.x 2.49.182.25010, 2.50.x 2.50.139.25010, 2.51.x 2.51.349.24355, or 2.52.x 2.52.62.25009. It is, therefor...
The vulnerability of the Power Automate for Desktop automation platform on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is 2.41.x 2.41.178.24249, 2.42.x 2.42.331.24249, 2.43.x 2.43.249.24249, 2.44.x 2.44.55.24249, 2.45.x 2.45.404.24249, 2.46.x 2.46.181.24249, or 2.47.x 2.47.119.24249. It is, therefore, affected by a remote cod...
Microsoft Power Automate For Desktop Installed (Windows)
Binary data microsoftpowerautomatefordesktopinstalled.nbin...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges to potentially execute code within the application, or to conduct a Cross-Site Scripting attack. Such an attack could result in execution of code in the...
CVE-2024-43479
Microsoft Power Automate Desktop Remote Code Execution Vulnerability...
CVE-2024-43479
Microsoft Power Automate Desktop Remote Code Execution Vulnerability...
CVE-2024-43479 Microsoft Power Automate Desktop Remote Code Execution Vulnerability
...
CVE-2024-43479 Microsoft Power Automate Desktop Remote Code Execution Vulnerability
...
CVE-2024-43479
CVE-2024-43479 affects Microsoft Power Automate Desktop. The vulnerability enables remote code execution in the desktop app when an attacker registers the target machine to their malicious Entra tenant and uses a crafted Entra token to impersonate the user, leading to code execution in the user s...