CVE-2025-47966

Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-47966

creationtimestamp| type| source ---|---|--- 2025-06-05 21:12:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114632815980881852 2025-06-05 21:27:52+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lqvb6nhzax2z 2025-06-06 00:43:00+00:00| seen|...

CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability

...

CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability

...

CVE-2025-47966

CVE-2025-47966 affects Microsoft Power Automate. The vulnerability is described as an exposure of sensitive information to an unauthenticated actor that could elevate privileges over a network. The issue is rated CVSSv3.1 base score 9.8 (critical), with attack vector: NETWORK, attack complexity: ...