Skip to content
OpenAdvisories
Critical 1 exploited CVE MSRC-CVE-2024-49035 1 CVE

Partner.Microsoft.Com Elevation of Privilege Vulnerability

Published Nov 12, 2024 · Updated Nov 27, 2024 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Not required.

Details

Why is no action required to install this update?
This CVE addresses a vulnerability in the Microsoft Power Apps online version only. As such, customers do not need to take any action because releases are rolled out automatically over several days. For more information about the releases for Microsoft Power Apps see What's new in Power Apps?.

Vulnerabilities 1

  • High 8.7
    CVE-2024-49035 Exploited

    Partner.Microsoft.Com Elevation of Privilege Vulnerability

    An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.

    Microsoft Microsoft Partner Center
    KEV Feb 25, 2025

Revision history

  1. #2

    Corrected **Exploited** to Yes. This is an informational change only.

  2. #1

    Information published.

References