8.5
High
CVE-2024-43479 Microsoft Power Automate Desktop Remote Code Execution Vulnerability
Description
Microsoft Power Automate Desktop Remote Code Execution Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Power Automate for Desktop 1.0 | 1.0.0.0 → < 2.47.119.24249 | 2.47.119.24249 |
References
- Microsoft Power Automate Desktop Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Power Automate for Desktop
The 6 CVEs of Power Automate for Desktop →
CVE-2026-77897
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally
7.0
High
CVE-2026-40374
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose…
6.5
Medium
CVE-2025-47966
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to…
9.8
Critical
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network
5.7
Medium