Powershell vulnerabilities

3 known vulnerabilities in Powershell from Microsoft. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  PowerShell 7.4: Improper Neutralization of Special Elements used in a Command

  CVE-2026-50523Aug 14, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

• 7.8 High severity

  PowerShell 7.4: Improper Control of Generation of Code

  CVE-2026-70338Aug 11, 2026Microsoft

  Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

• 7.0 High severity

  PowerShell 7.4: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2025-49734Sep 9, 2025Microsoft

  Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.