CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability

...

CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability

...

CVE-2025-47966

CVE-2025-47966 affects Microsoft Power Automate. The vulnerability is described as an exposure of sensitive information to an unauthenticated actor that could elevate privileges over a network. The issue is rated CVSSv3.1 base score 9.8 (critical), with attack vector: NETWORK, attack complexity: ...

Power Automate Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network...

PT-2025-23979 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Power Automate affected versions not specified Description: Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, the...

Microsoft Power Automate 信息泄露漏洞

Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate with various applications and services. An information disclosure vulnerability exists in Microsoft Power Automate that stems from t...

KLA84714 PE vulnerability in Microsoft Dynamics

An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2025-47966 Related products Power-Automate-for-Desktop CVE list CVE-2025-47966 critical Solution Instal...

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

SAMSUNG Exynos 2400、SAMSUNG Exynos 2200和SAMSUNG Exynos 1480 安全漏洞

SAMSUNG Exynos 2400 and others are a cell phone chip processor from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Exynos 2400, SAMSUNG Exynos 2200, and SAMSUNG Exynos 1480, which stems from a reuse after release that could lead to elevation of privilege...

SAMSUNG Exynos 1380 安全漏洞

SAMSUNG Exynos 1380 is a cell phone chip processor from South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Exynos 1380, which stems from reuse after release and could lead to elevation of privilege...

Razer Synapse 4 安全漏洞

Razer Synapse 4 is an application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 4 4.0.86.2502180127 and prior versions, which stems from a COM interface vulnerability that could lead to local elevation of...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that originates from the component RIL, which could lead to elevation of privilege...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from insufficient input validation, which could lead to local elevation of privilege...

Microsoft Edge (Chromium-based) Update elevation of privilege vulnerability (CNVD-2025-23057)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based Update, which is caused by improper link resolution before file access. An attacker could exploit the...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that originates in the Bluetooth Bluetooth component of the device and could lead to elevation of privileges...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that originates in the Bluetooth Bluetooth component of the device and could lead to elevation of privileges...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Swedish company Axis AXIS. A security vulnerability exists in AXIS OS versions 11.8 through 12.2, which stems from an elevation of privilege issue that could result in a low-privileged user gaining administrator privileges...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a lack of privilege checking, which could lead to remote elevation of privilege...

SolarWinds DameWare Mini Remote Control 安全漏洞

SolarWinds DameWare Mini Remote Control is a remote control software and desktop sharing tool from SolarWinds USA. A security vulnerability exists in SolarWinds DameWare Mini Remote Control that stems from improper privileges and could result in local elevation of privileges...