Microsoft PowerShell vulnerabilities

30 CVEs affecting Microsoft PowerShell, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-50523, published 2026-08-14.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-41076, published 2022-12-13. High severity, CVSS 8.5. EPSS: 60.5% chance of exploitation in the next 30 days. PowerShell Remote Code Execution Vulnerability
• CVE-2018-8327, published 2018-07-11. Critical severity, CVSS 9.8. EPSS: 23.1% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects PowerShell Editor, PowerShell Extension.
• CVE-2021-41355, published 2021-10-13. Medium severity, CVSS 5.7. EPSS: 20.3% chance of exploitation in the next 30 days. .NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2020-0951, published 2020-09-11. Medium severity, CVSS 6.7. EPSS: 6.6% chance of exploitation in the next 30 days. <p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this…
• CVE-2020-1108, published 2020-05-21. High severity, CVSS 7.5. EPSS: 6.5% chance of exploitation in the next 30 days. A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service…
• CVE-2022-23267, published 2022-05-10. High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days. .NET and Visual Studio Denial of Service Vulnerability
• CVE-2020-8927, published 2020-09-15. Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days. A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which…
• CVE-2024-21392, published 2024-03-12. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. .NET and Visual Studio Denial of Service Vulnerability
• CVE-2024-26190, published 2024-03-12. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. Microsoft QUIC Denial of Service Vulnerability
• CVE-2024-0057, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

Latest

• CVE-2026-50523, published 2026-08-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
• CVE-2026-70338, published 2026-08-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-70337, published 2026-08-11. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
• CVE-2026-59119, published 2026-08-11. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2026-58612, published 2026-08-11. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
• CVE-2026-26171, published 2026-04-14. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-26143, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
• CVE-2025-25004, published 2025-10-14. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2025-49734, published 2025-09-09. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2025-30399, published 2025-06-13. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.