Microsoft Powershell 7.5 vulnerabilities
17 vulnerabilities
Known vulnerabilities in Microsoft Powershell 7.5, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96303microsoftpowershell+3
EPSS score0.59%
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96251microsoftpowershell+3EPSS score0.52%
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.CVE-2025-21171chainguarddotnet-bootstrap-9+23EPSS score1.70%
.NET Remote Code Execution VulnerabilityCVE-2025-25004microsoftpowershell+39EPSS score0.48%
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.CVE-2025-49734microsoftpowershell+26EPSS score0.33%
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.CVE-2025-30399chainguarddotnet-bootstrap-8+72EPSS score1.07%
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2024-43499chainguarddotnet-bootstrap-9+11EPSS score2.60%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43485ubuntudotnet6+14EPSS score3.08%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43498chainguarddotnet-bootstrap-9+11EPSS score3.59%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-40400microsoftpowershell 7.5+26EPSS score0.87%
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.CVE-2026-59119microsoftpowershell+3EPSS score0.38%
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.CVE-2026-26171chainguarddotnet-10-sdk+32EPSS score2.26%
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-26143microsoftpowershell+2EPSS score0.47%
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.CVE-2026-58612microsoftpowershell+3EPSS score0.87%
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.CVE-2026-70337microsoftpowershell+3EPSS score0.94%
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.CVE-2026-70338microsoftpowershell+3EPSS score0.36%
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.CVE-2026-50523microsoftpowershell+3EPSS score0.32%
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.