CVE-2026-96303: Microsoft PowerShell Security Feature Bypass Vulnerability
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Other sources
Microsoft PowerShell Security Feature Bypass Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.5.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.4.21 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.6.7
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vector indicates network-based exploitation with low attack complexity and no required privileges. Exploitation does require user interaction.
What is the likely security impact?
The reported impact is integrity-only: an attacker may bypass a PowerShell security feature and alter information or actions protected by that feature. No confidentiality or availability impact is indicated by the supplied metrics.
Which PowerShell releases are identified as affected?
The listed affected products include Microsoft PowerShell and Microsoft PowerShell versions 7.4, 7.5, and 7.6.