cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2025-21187,https://securityvulnerability.io/vulnerability/CVE-2025-21187,Remote Code Execution Vulnerability in Microsoft Power Automate,"The Microsoft Power Automate vulnerability allows an attacker to execute arbitrary code on the host machine, posing serious security risks for users. This vulnerability can potentially be exploited via malicious workflows or payloads, enabling unauthorized access to sensitive data or critical systems within an organization. Users are advised to apply available patches and review their Power Automate configurations to ensure compliance with security best practices.",Microsoft,Power Automate For Desktop,7.8,HIGH,0.000539999979082495,false,,false,false,false,,false,false,false,,2025-01-14T18:04:20.259Z,0 CVE-2024-43479,https://securityvulnerability.io/vulnerability/CVE-2024-43479,Remote Code Execution Vulnerability Affects Power Automate Desktop,"A vulnerability has been identified in Microsoft Power Automate Desktop that allows remote code execution. This issue arises from insufficient input validation mechanisms, enabling an attacker to execute arbitrary code on the affected system. Successful exploitation could lead to unauthorized access, posing significant risks to data integrity and confidentiality. Microsoft has provided guidance for remediation, and users are encouraged to apply the latest patches to mitigate potential threats.",Microsoft,Power Automate For Desktop,8.5,HIGH,0.0004600000102072954,false,,false,false,false,,,false,false,,2024-09-10T16:54:18.302Z,0