Microsoft Powershell 7.1 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Microsoft Powershell 7.1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-41355microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+39
EPSS score20.34%
.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-34485microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+56EPSS score2.07%
.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2020-0951microsoftpowershell+20EPSS score6.58%
<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC.</p>
<p>To exploit the vulnerability, an attacker need administrator access on a local machine where PowerShell is running. The attacker could then connect to a PowerShell session and send commands to execute arbitrary code.</p>
<p>The update addresses the vulnerability by correcting how PowerShell commands are validated when WDAC protection is enabled.</p>CVE-2022-26788microsoftpowershell+29EPSS score0.65%
PowerShell Elevation of Privilege VulnerabilityCVE-2022-24512fedoraprojectfedora+130EPSS score1.61%
.NET and Visual Studio Remote Code Execution Vulnerability