Microsoft Powershell 7.0 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Microsoft Powershell 7.0, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-34485microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+56
EPSS score2.07%
.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2020-1108microsoftmicrosoft .net framework 2.0 service pack 2+88EPSS score6.46%
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.CVE-2020-0951microsoftpowershell+20EPSS score6.58%
<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC.</p>
<p>To exploit the vulnerability, an attacker need administrator access on a local machine where PowerShell is running. The attacker could then connect to a PowerShell session and send commands to execute arbitrary code.</p>
<p>The update addresses the vulnerability by correcting how PowerShell commands are validated when WDAC protection is enabled.</p>CVE-2022-26788microsoftpowershell+29EPSS score0.65%
PowerShell Elevation of Privilege VulnerabilityCVE-2022-24512fedoraprojectfedora+130EPSS score1.61%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2022-34716microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+57EPSS score2.43%
.NET Spoofing VulnerabilityCVE-2022-23267fedoraprojectfedora+28EPSS score5.70%
.NET and Visual Studio Denial of Service Vulnerability