9.8
Critique
CVE-2025-47966 Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to…
Description
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Power Automate for Desktop | Versions non publiées |
Références
- Power Automate Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Power Automate for Desktop
Les 6 CVE de Power Automate for Desktop →
CVE-2026-77897
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally
7.0
Élevée
CVE-2026-40374
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose…
6.5
Moyenne
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network
5.7
Moyenne
CVE-2025-21187
Microsoft Power Automate Remote Code Execution Vulnerability
7.8
Élevée