Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Powershell
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-0951 1 Microsoft 4 Powershell, Windows 10, Windows Server 2016 and 1 more 2026-02-23 7.2 HIGH 6.7 MEDIUM
<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC.</p> <p>To exploit the vulnerability, an attacker need administrator access on a local machine where PowerShell is running. The attacker could then connect to a PowerShell session and send commands to execute arbitrary code.</p> <p>The update addresses the vulnerability by correcting how PowerShell commands are validated when WDAC protection is enabled.</p>
CVE-2025-25004 1 Microsoft 17 Powershell, Windows 10 1507, Windows 10 1607 and 14 more 2025-10-20 N/A 7.3 HIGH
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-49734 1 Microsoft 13 Powershell, Windows 10 1607, Windows 10 1809 and 10 more 2025-10-02 N/A 7.0 HIGH
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2018-8327 1 Microsoft 2 Powershell, Powershell Editor Services 2025-07-16 10.0 HIGH 9.8 CRITICAL
A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects PowerShell Editor, PowerShell Extension.
CVE-2025-21171 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2025-07-10 N/A 7.5 HIGH
.NET Remote Code Execution Vulnerability
CVE-2025-30399 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2025-07-10 N/A 7.5 HIGH
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2022-41121 1 Microsoft 12 Powershell, Remote Desktop Client, Windows 10 and 9 more 2025-07-07 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-34716 1 Microsoft 3 .net, .net Core, Powershell 2025-05-29 N/A 5.9 MEDIUM
.NET Spoofing Vulnerability
CVE-2024-21409 1 Microsoft 16 .net, .net Framework, Powershell and 13 more 2025-01-17 N/A 7.3 HIGH
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30045 1 Microsoft 3 .net, Powershell, Visual Studio 2022 2025-01-08 N/A 6.3 MEDIUM
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2022-41076 1 Microsoft 11 Powershell, Windows 10, Windows 11 and 8 more 2025-01-02 N/A 8.5 HIGH
PowerShell Remote Code Execution Vulnerability
CVE-2022-23267 2 Fedoraproject, Microsoft 6 Fedora, .net, .net Core and 3 more 2025-01-02 5.0 MEDIUM 7.5 HIGH
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-26190 1 Microsoft 8 .net, Powershell, Visual Studio 2022 and 5 more 2024-12-27 N/A 7.5 HIGH
Microsoft QUIC Denial of Service Vulnerability
CVE-2024-21392 1 Microsoft 3 .net, Powershell, Visual Studio 2022 2024-11-29 N/A 7.5 HIGH
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-0057 1 Microsoft 17 .net, .net Framework, Powershell and 14 more 2024-11-21 N/A 9.1 CRITICAL
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-36013 1 Microsoft 1 Powershell 2024-11-21 N/A 6.5 MEDIUM
PowerShell Information Disclosure Vulnerability
CVE-2023-21538 2 Fedoraproject, Microsoft 3 Fedora, .net, Powershell 2024-11-21 N/A 7.5 HIGH
.NET Denial of Service Vulnerability
CVE-2022-26788 1 Microsoft 10 Powershell, Windows 10, Windows 11 and 7 more 2024-11-21 4.6 MEDIUM 7.8 HIGH
PowerShell Elevation of Privilege Vulnerability
CVE-2022-24512 2 Fedoraproject, Microsoft 6 Fedora, .net, .net Core and 3 more 2024-11-21 6.8 MEDIUM 6.3 MEDIUM
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2021-43896 1 Microsoft 1 Powershell 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
Microsoft PowerShell Spoofing Vulnerability