Known vulnerabilities in PowerShell

Vendor: Microsoft
Software: PowerShell
Software CPE: cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerShell PowerShell is affected by 12 known vulnerabilities: 3 high, 6 medium, 3 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143635 - Command injection
CVE-2026-50523
CWE-77 Low
No
No
7.4.19.0, 7.5.10, 7.6.5 17.08.2026 SB2026081748
#VU142003 - Relative Path Traversal
CVE-2026-70337
CWE-23 High
No
No
7.4.19.0 12.08.2026 SB20260812232
#VU142002 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-70338
CWE-94 High
No
No
7.4.19.0 12.08.2026 SB20260812232
#VU141878 - Incorrect Default Permissions
CVE-2026-59119
CWE-276 Medium
No
No
7.4.19.0 12.08.2026 SB20260812232
#VU141736 - Server-Side Request Forgery (SSRF)
CVE-2026-58612
CWE-918 Medium
No
No
7.4.19.0 12.08.2026 SB20260812232
#VU126136 - Improper input validation
CVE-2026-26143
CWE-20 High
No
No
7.4.14 15.04.2026 SB2026041548
#VU117111 - Improper Access Control
CVE-2025-25004
CWE-284 Low
No
No
7.4.13 7.4.13 14.10.2025 SB2025101497
#VU102801 - Heap-based Buffer Overflow
CVE-2025-21171
CWE-122 Medium
No
No
7.5.0 15.01.2025 SB2025011545
SB2025011647
SB2025011672
and 2 more
#VU83310 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36013
CWE-200 Medium
No
No
7.2.17, 7.3.10, 7.4.0 20.11.2023 SB2023112063
#VU74917 - Uncontrolled Search Path Element
CVE-2023-28260
CWE-427 Medium
No
No
7.2.11, 7.3.4 11.04.2023 SB2023041173
SB2023041206
SB2023111618
#VU70180 - Improper input validation
CVE-2022-41076
CWE-20 Medium
No
No
- 13.12.2022 SB2022121357
#VU58975 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43896
CWE-451 Low
No
No
- 14.12.2021 SB2021121491