Sep 2024: Microsoft Power Automate Desktop Remote Code Execution Vulnerability
CVE-2024-43479 Published on September 10, 2024
Microsoft Power Automate Desktop Remote Code Execution Vulnerability
Microsoft Power Automate Desktop Remote Code Execution Vulnerability
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2024-43479 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2024-43479
stack.watch emails you whenever new vulnerabilities are published in Microsoft Power Automate or Microsoft Power Automate For Desktop. Just hit a watch button to start following.
Affected Versions
Microsoft Power Automate for Desktop:- Version 1.0.0.0 and below 2.47.119.24249 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.