Remote Code Execution Vulnerability Affects Power Automate Desktop
CVE-2024-43479

8.5HIGH

Key Information:

Vendor

Microsoft
Status
Power Automate For Desktop
Vendor
CVE Published:
10 September 2024

What is CVE-2024-43479?

A vulnerability has been identified in Microsoft Power Automate Desktop that allows remote code execution. This issue arises from insufficient input validation mechanisms, enabling an attacker to execute arbitrary code on the affected system. Successful exploitation could lead to unauthorized access, posing significant risks to data integrity and confidentiality. Microsoft has provided guidance for remediation, and users are encouraged to apply the latest patches to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Power Automate for Desktop Unknown 1.0.0.0 < 2.47.119.24249

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.