Microsoft Powershell
30 CVEs affecting Microsoft Powershell. Latest disclosed: 2026-08-14. Critical: 2, High: 20.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8327 | Critical | 9.8 | 2018-07-11 | A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects… |
CVE-2024-0057 | Critical | 9.1 | 2024-01-09 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability |
CVE-2026-70337 | High | 8.8 | 2026-08-11 | Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network. |
CVE-2022-41076 | High | 8.5 | 2022-12-13 | PowerShell Remote Code Execution Vulnerability |
CVE-2026-50523 | High | 7.8 | 2026-08-14 | Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code local… |
CVE-2026-70338 | High | 7.8 | 2026-08-11 | Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-26143 | High | 7.8 | 2026-04-14 | Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. |
CVE-2022-41121 | High | 7.8 | 2022-12-13 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-26788 | High | 7.8 | 2022-04-15 | PowerShell Elevation of Privilege Vulnerability |
CVE-2026-26171 | High | 7.5 | 2026-04-14 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2025-30399 | High | 7.5 | 2025-06-13 | Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. |
CVE-2025-21171 | High | 7.5 | 2025-01-14 | .NET Remote Code Execution Vulnerability |
CVE-2024-26190 | High | 7.5 | 2024-03-12 | Microsoft QUIC Denial of Service Vulnerability |
CVE-2024-21392 | High | 7.5 | 2024-03-12 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2023-21538 | High | 7.5 | 2023-01-10 | .NET Denial of Service Vulnerability |
CVE-2022-23267 | High | 7.5 | 2022-05-10 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2020-1108 | High | 7.5 | 2020-05-21 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerab… |
CVE-2026-58612 | High | 7.4 | 2026-08-11 | Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network. |
CVE-2026-59119 | High | 7.3 | 2026-08-11 | Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. |
CVE-2025-25004 | High | 7.3 | 2025-10-14 | Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. |