CVEs (5)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 1Power Automate For Desktop Sep 29, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. |
1Microsoft 1Power Automate For Desktop Oct 26, 2026 May 12, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network. |
1Microsoft 1Power Automate For Desktop Jun 17, 2026 Jun 5, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network. |
1Microsoft 1Power Automate For Desktop Jun 17, 2026 Apr 15, 2025 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network. |
1Microsoft 1Power Automate For Desktop Jun 17, 2026 Jan 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Power Automate Remote Code Execution Vulnerability |