19369 matches found
Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is 2.41.x 2.41.178.24249, 2.42.x 2.42.331.24249, 2.43.x 2.43.249.24249, 2.44.x 2.44.55.24249, 2.45.x 2.45.404.24249, 2.46.x 2.46.181.24249, or 2.47.x 2.47.119.24249. It is, therefore, affected by a remote cod...
Microsoft Power Automate For Desktop Installed (Windows)
Binary data microsoftpowerautomatefordesktopinstalled.nbin...
CVE-2024-43479
Microsoft Power Automate Desktop Remote Code Execution Vulnerability...
CVE-2024-43479
Microsoft Power Automate Desktop Remote Code Execution Vulnerability...
CVE-2024-43467
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-43467
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-43455
Windows Remote Desktop Licensing Service Spoofing Vulnerability...
CVE-2024-38263
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-43454
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-38260
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-43455
Windows Remote Desktop Licensing Service Spoofing Vulnerability...
CVE-2024-38263
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-38260
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
CVE-2024-38258
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability...
CVE-2024-38258
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability...
CVE-2024-38231
Windows Remote Desktop Licensing Service Denial of Service Vulnerability...
CVE-2024-38231
Windows Remote Desktop Licensing Service Denial of Service Vulnerability...
CVE-2024-43479
CVE-2024-43479 affects Microsoft Power Automate Desktop. The vulnerability enables remote code execution in the desktop app when an attacker registers the target machine to their malicious Entra tenant and uses a crafted Entra token to impersonate the user, leading to code execution in the user s...
