Advisories · Technology

Microsoft Power Automate for Desktop.

Every CVE that names Microsoft Power Automate for Desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77897 CVE record

CVSS 7.0 High

Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
- Microsoft Power Automate agent for virtual desktops
- Microsoft Power Automate for Desktop
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-40374 CVE record

CVSS 6.5 Medium

Microsoft Power Automate Desktop Information Disclosure Vulnerability
- Microsoft Power Automate for Desktop
- Information disclosure
Not analysed yet 12 May 2026
CVE-2025-47966 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Power Automate Elevation of Privilege Vulnerability
- Microsoft Power Automate for Desktop
- Information disclosure
Not analysed yet 5 Jun 2025
CVE-2025-29817 CVE record

CVSS 5.7 Medium

Microsoft Power Automate Desktop Information Disclosure Vulnerability
- Microsoft Power Automate for Desktop
- CWE-427
Not analysed yet 15 Apr 2025
CVE-2025-21187 CVE record

CVSS 7.8 High

Microsoft Power Automate Remote Code Execution Vulnerability
- Microsoft Power Automate for Desktop
- Code injection
Not analysed yet 14 Jan 2025
CVE-2024-43479 CVE record

CVSS 8.5 High

Microsoft Power Automate Desktop Remote Code Execution Vulnerability
- Microsoft Power Automate for Desktop
- Broken access control
Not analysed yet 10 Sept 2024