Known vulnerabilities in PowerShell

Vendor: Microsoft
Software: PowerShell
Software CPE: cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerShell PowerShell is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126136 - Improper input validation
CVE-2026-26143
CWE-20 High
No
No
7.4.14 15.04.2026 SB2026041548
#VU117111 - Improper Access Control
CVE-2025-25004
CWE-284 Low
No
No
7.4.13 7.4.13 14.10.2025 SB2025101497
#VU102801 - Heap-based Buffer Overflow
CVE-2025-21171
CWE-122 Medium
No
No
7.5.0 15.01.2025 SB2025011545
SB2025011647
SB2025011672
and 2 more
#VU83310 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36013
CWE-200 Medium
No
No
7.2.17, 7.3.10, 7.4.0 20.11.2023 SB2023112063
#VU74917 - Uncontrolled Search Path Element
CVE-2023-28260
CWE-427 Medium
No
No
7.2.11, 7.3.4 11.04.2023 SB2023041173
SB2023041206
SB2023111618
#VU70180 - Improper input validation
CVE-2022-41076
CWE-20 Medium
No
No
- 13.12.2022 SB2022121357
#VU58975 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43896
CWE-451 Low
No
No
- 14.12.2021 SB2021121491