Skip to content
OpenAdvisories

Product · Microsoft

Power Automate for Desktop

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40374

    Microsoft Power Automate Desktop Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.

    Microsoft Power Automate for Desktop
  • Medium 5.7
    CVE-2025-29817

    Microsoft Power Automate Desktop Information Disclosure Vulnerability

    Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.

    Microsoft Power Automate for Desktop