Powershell (Microsoft) - vulnerabilities (CVEs)

58 CVEs, 2 in the last 30 days, 413 known versions, newest CVE from 2026-10-13. Vendor: Microsoft.

CVEs of Powershell

• CVE-2026-96251 - CVSS 8.8 (high), 2026-10-13: Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
• CVE-2026-96303 - CVSS 6.5 (medium), 2026-10-13: Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2026-50523 - CVSS 7.8 (high), 2026-08-14: Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code…
• CVE-2026-70337 - CVSS 8.8 (high), 2026-08-11: Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
• CVE-2026-70338 - CVSS 7.8 (high), 2026-08-11: Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-59119 - CVSS 7.3 (high), 2026-08-11: Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2026-58612 - CVSS 7.5 (high), 2026-08-11: Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
• CVE-2026-40400 - CVSS 8 (high), 2026-07-14: Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.
• CVE-2026-26171 - CVSS 7.5 (high), 2026-04-14: Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-26143 - CVSS 7.8 (high), 2026-04-14: Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
• CVE-2025-25004 - CVSS 7.3 (high), 2025-10-14: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2025-49734 - CVSS 7 (high), 2025-09-09: Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2025-30399 - CVSS 7.5 (high), 2025-06-13: Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
• CVE-2025-21171 - CVSS 7.5 (high), 2025-01-14: .NET Remote Code Execution Vulnerability
• CVE-2024-43499 - CVSS 7.5 (high), 2024-11-12: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2024-43498 - CVSS 9.8 (critical), 2024-11-12: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2024-43484 - CVSS 7.5 (high), 2024-10-08: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
• CVE-2024-43483 - CVSS 7.5 (high), 2024-10-08: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
• CVE-2024-43485 - CVSS 7.5 (high), 2024-10-08: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2024-38095 - CVSS 7.5 (high), 2024-07-09: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2024-30105 - CVSS 7.5 (high), 2024-07-09: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2024-30045 - CVSS 6.3 (medium), 2024-05-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2024-21409 - CVSS 7.3 (high), 2024-04-09: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2024-26190 - CVSS 7.5 (high), 2024-03-12: Microsoft QUIC Denial of Service Vulnerability
• CVE-2024-21392 - CVSS 7.5 (high), 2024-03-12: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2024-0057 - CVSS 9.8 (critical), 2024-01-09: NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
• CVE-2023-36013 - CVSS 6.5 (medium), 2023-11-20: PowerShell Information Disclosure Vulnerability
• CVE-2023-38171 - CVSS 7.5 (high), 2023-10-10: Microsoft QUIC Denial of Service Vulnerability
• CVE-2023-36435 - CVSS 7.5 (high), 2023-10-10: Microsoft QUIC Denial of Service Vulnerability
• CVE-2023-36796 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36799 - CVSS 6.5 (medium), 2023-09-12: .NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2023-36792 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36794 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-36793 - CVSS 7.8 (high), 2023-09-12: Visual Studio Remote Code Execution Vulnerability
• CVE-2023-33127 - CVSS 8.1 (high), 2023-07-11: .NET and Visual Studio Elevation of Privilege Vulnerability
• CVE-2023-24936 - CVSS 7.5 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
• CVE-2023-24897 - CVSS 7.8 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-24895 - CVSS 7.8 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-29331 - CVSS 7.5 (high), 2023-06-14: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
• CVE-2023-33128 - CVSS 7.3 (high), 2023-06-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-33126 - CVSS 7.3 (high), 2023-06-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-32032 - CVSS 6.5 (medium), 2023-06-14: .NET and Visual Studio Elevation of Privilege Vulnerability
• CVE-2023-28260 - CVSS 7.8 (high), 2023-04-11: .NET DLL Hijacking Remote Code Execution Vulnerability
• CVE-2023-21808 - CVSS 7.8 (high), 2023-02-14: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2023-21538 - CVSS 7.5 (high), 2023-01-10: .NET Denial of Service Vulnerability
• CVE-2022-41089 - CVSS 7.8 (high), 2022-12-13: .NET Framework Remote Code Execution Vulnerability
• CVE-2022-41121 - CVSS 7.8 (high), 2022-12-13: Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2022-41076 - CVSS 8.5 (high), 2022-12-13: PowerShell Remote Code Execution Vulnerability
• CVE-2022-34716 - CVSS 5.9 (medium), 2022-08-09: .NET Spoofing Vulnerability
• CVE-2022-23267 - CVSS 7.5 (high), 2022-05-10: .NET and Visual Studio Denial of Service Vulnerability
• CVE-2022-26788 - CVSS 7.8 (high), 2022-04-15: PowerShell Elevation of Privilege Vulnerability
• CVE-2022-24512 - CVSS 6.3 (medium), 2022-03-09: .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2021-43896 - CVSS 5.5 (medium), 2021-12-15: Microsoft PowerShell Spoofing Vulnerability
• CVE-2021-41355 - CVSS 5.7 (medium), 2021-10-13: .NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2020-8927 - CVSS 6.5 (medium), 2020-09-15: A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to…
• CVE-2020-0951 - CVSS 6.7 (medium), 2020-09-11: <p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An…
• CVE-2020-1108 - CVSS 7.5 (high), 2020-05-21: A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this…
• CVE-2018-8327 - CVSS 9.8 (critical), 2018-07-11: A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects…