Microsoft Powershell — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Powershell, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (30)

• CVE-2018-8327 — CVSS 9.8 (critical): A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution…
• CVE-2024-0057 — CVSS 9.1 (critical): NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
• CVE-2026-70337 — CVSS 8.8 (high): Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
• CVE-2022-41076 — CVSS 8.5 (high): PowerShell Remote Code Execution Vulnerability
• CVE-2026-70338 — CVSS 7.8 (high): Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security…
• CVE-2022-26788 — CVSS 7.8 (high): PowerShell Elevation of Privilege Vulnerability
• CVE-2022-41121 — CVSS 7.8 (high): Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2026-26143 — CVSS 7.8 (high): Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-50523 — CVSS 7.8 (high): Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker…
• CVE-2024-26190 — CVSS 7.5 (high): Microsoft QUIC Denial of Service Vulnerability
• CVE-2022-23267 — CVSS 7.5 (high): .NET and Visual Studio Denial of Service Vulnerability
• CVE-2026-26171 — CVSS 7.5 (high): Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2023-21538 — CVSS 7.5 (high): .NET Denial of Service Vulnerability
• CVE-2020-1108 — CVSS 7.5 (high): A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully…
• CVE-2025-30399 — CVSS 7.5 (high): Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
• CVE-2024-21392 — CVSS 7.5 (high): .NET and Visual Studio Denial of Service Vulnerability
• CVE-2025-21171 — CVSS 7.5 (high): .NET Remote Code Execution Vulnerability
• CVE-2026-58612 — CVSS 7.4 (high): Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
• CVE-2026-59119 — CVSS 7.3 (high): Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2024-21409 — CVSS 7.3 (high): .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
• CVE-2025-25004 — CVSS 7.3 (high): Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
• CVE-2025-49734 — CVSS 7.0 (high): Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate…
• CVE-2020-0951 — CVSS 6.7 (medium): <p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass…
• CVE-2023-36013 — CVSS 6.5 (medium): PowerShell Information Disclosure Vulnerability
• CVE-2024-30045 — CVSS 6.3 (medium): .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2022-24512 — CVSS 6.3 (medium): .NET and Visual Studio Remote Code Execution Vulnerability
• CVE-2022-34716 — CVSS 5.9 (medium): .NET Spoofing Vulnerability
• CVE-2021-41355 — CVSS 5.7 (medium): .NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2021-43896 — CVSS 5.5 (medium): Microsoft PowerShell Spoofing Vulnerability
• CVE-2020-8927 — CVSS 5.3 (medium): A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot"…