Aller au contenu

Vulnérabilités de Microsoft PowerShell 7.5

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-96303 Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a… 6.5 Moyenne 13 oct. 2026
CVE-2026-96251 Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute… 8.8 Élevée 13 oct. 2026
CVE-2026-50523 Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an… 7.8 Élevée 14 août 2026
CVE-2026-70337 Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network 8.8 Élevée 11 août 2026
CVE-2026-70338 Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to… 7.8 Élevée 11 août 2026
CVE-2026-59119 Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.3 Élevée 11 août 2026
CVE-2026-58612 Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose… 7.4 Élevée 11 août 2026
CVE-2026-40400 Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network 8.0 Élevée 14 juil. 2026
CVE-2026-26171 Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée 14 avr. 2026
CVE-2026-26143 Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally 7.8 Élevée 14 avr. 2026
CVE-2025-25004 Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.3 Élevée 14 oct. 2025
CVE-2025-49734 Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized… 7.0 Élevée 9 sept. 2025
CVE-2025-30399 Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network 7.5 Élevée 13 juin 2025
CVE-2025-21171 .NET Remote Code Execution Vulnerability 7.5 Élevée 14 janv. 2025
CVE-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability 9.8 Critique 12 nov. 2024
CVE-2024-43499 .NET and Visual Studio Denial of Service Vulnerability 7.5 Élevée 12 nov. 2024
CVE-2024-43485 .NET and Visual Studio Denial of Service Vulnerability 7.5 Élevée 8 oct. 2024

Autres produits Microsoft