Microsoft PowerShell Remote Code Execution Vulnerability

.NET Remote Code Execution Vulnerability

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

.NET and Visual Studio Remote Code Execution Vulnerability

.NET - SecurityFeatureBypass - Denial of Service and Security Feature Bypass via Unsafe Transforms in EncryptedXml

PowerShell Information Disclosure Vulnerability

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

End of life: 11/10/2026, Latest version: 7.5.10