First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-43479

HighCVSS 8.5/10Last modified Aug 10, 2026

Description

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Sep 10, 2024
Last modified: Aug 10, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-43484.3A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-pr CVE-2024-434806.6Azure Service Fabric for Linux Remote Code Execution Vulnerability CVE-2024-434818.8Power BI Report Server Spoofing Vulnerability CVE-2024-434826.5Microsoft Outlook for iOS Information Disclosure Vulnerability CVE-2024-434837.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-434847.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-434857.5.NET and Visual Studio Denial of Service Vulnerability CVE-2024-434876.5Windows Mark of the Web Security Feature Bypass Vulnerability CVE-2024-434889.8Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remot CVE-2024-434898.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2024-43497.3A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerabili CVE-2024-434919.8Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Componen