What’s Vulnerable › Products

Microsoft Power Automate for Desktop vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Microsoft Power Automate for Desktop version is affected

Latest Microsoft Power Automate for Desktop vulnerabilities

• CVE-2026-77897 — Microsoft Power Automate Desktop Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2026-40374 — Microsoft Power Automate Desktop Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2025-47966 — Power Automate Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2025-29817 — Microsoft Power Automate Desktop Information Disclosure Vulnerability (CVSS 5.7)
• CVE-2025-21187 — Microsoft Power Automate Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2024-43479 — Microsoft Power Automate Desktop Remote Code Execution Vulnerability (CVSS 8.5)