Microsoft PowerShell Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

PowerShell Information Disclosure Vulnerability

.NET - SecurityFeatureBypass - Denial of Service and Security Feature Bypass via Unsafe Transforms in EncryptedXml

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

.NET Remote Code Execution Vulnerability

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

.NET and Visual Studio Remote Code Execution Vulnerability

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

End of life: 11/10/2026, Latest version: 7.5.10