Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
2025-10-14T17:15:39.380
2025-10-20T20:06:19.273
Analyzed
CVSSv3.1: 7.3 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | powershell | < 7.4.13 | Yes |
| Application | microsoft | powershell | < 7.5.4 | Yes |
| Operating System | microsoft | windows_10_1507 | < 10.0.10240.21161 | Yes |
| Operating System | microsoft | windows_10_1507 | < 10.0.10240.21161 | Yes |
| Operating System | microsoft | windows_10_1607 | < 10.0.14393.8519 | Yes |
| Operating System | microsoft | windows_10_1607 | < 10.0.14393.8519 | Yes |
| Operating System | microsoft | windows_10_1809 | < 10.0.17763.7919 | Yes |
| Operating System | microsoft | windows_10_1809 | < 10.0.17763.7919 | Yes |
| Operating System | microsoft | windows_10_21h2 | < 10.0.19044.6456 | Yes |
| Operating System | microsoft | windows_10_22h2 | < 10.0.19045.6456 | Yes |
| Operating System | microsoft | windows_11_22h2 | < 10.0.22621.6060 | Yes |
| Operating System | microsoft | windows_11_23h2 | ≤ 10.0.22631.6060 | Yes |
| Operating System | microsoft | windows_11_24h2 | < 10.0.26100.6899 | Yes |
| Operating System | microsoft | windows_11_25h2 | < 10.0.26200.6899 | Yes |
| Operating System | microsoft | windows_server_2008 | - | Yes |
| Operating System | microsoft | windows_server_2008 | - | Yes |
| Operating System | microsoft | windows_server_2008 | r2 | Yes |
| Operating System | microsoft | windows_server_2012 | - | Yes |
| Operating System | microsoft | windows_server_2012 | r2 | Yes |
| Operating System | microsoft | windows_server_2016 | ≤ 10.0.14393.8519 | Yes |
| Operating System | microsoft | windows_server_2019 | < 10.0.17763.7919 | Yes |
| Operating System | microsoft | windows_server_2022 | < 10.0.20348.4294 | Yes |
| Operating System | microsoft | windows_server_2022_23h2 | < 10.0.25398.1913 | Yes |
| Operating System | microsoft | windows_server_2025 | ≤ 10.0.26100.6899 | Yes |