Microsoft Powershell Core — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Powershell Core, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (18)

• CVE-2018-8256 — CVSS 8.8 (high): A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote…
• CVE-2021-26701 — CVSS 8.1 (high): .NET Core Remote Code Execution Vulnerability
• CVE-2018-8415 — CVSS 7.8 (high): A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering…
• CVE-2019-0627 — CVSS 7.8 (high): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security…
• CVE-2019-0631 — CVSS 7.8 (high): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security…
• CVE-2019-0632 — CVSS 7.8 (high): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security…
• CVE-2018-0764 — CVSS 7.5 (high): Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a…
• CVE-2018-0786 — CVSS 7.5 (high): Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core…
• CVE-2018-0875 — CVSS 7.5 (high): .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted…
• CVE-2018-8292 — CVSS 7.5 (high): An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka…
• CVE-2019-1301 — CVSS 7.5 (high): A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.
• CVE-2020-1108 — CVSS 7.5 (high): A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework…
• CVE-2021-26423 — CVSS 7.5 (high): .NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2021-1721 — CVSS 6.5 (medium): .NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2019-0657 — CVSS 5.9 (medium): A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio…
• CVE-2018-8356 — CVSS 5.5 (medium): A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET…
• CVE-2021-34485 — CVSS 5.0 (medium): .NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2019-1167 — CVSS 4.1 (medium): A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC…